GAO reviews public and private sector data breaches
The report examined data breaches within both federal and private organizations and media reports on the compromising of sensitive personal information. They found that breaches have been widespread and vary in size and threat, occurring on the federal, state and local levels, and across a range of institutions.
The report was particularly concerned with the link between data breaches and identity theft -- a link difficult to determine because of the hazy nature of most ID thefts. GAO discussed options for notifying consumers about compromised data, saying that notification when the risk for identity theft is greater could provide incentives for both consumers and data collectors to take steps toward prevention.