Unencrypted FirstGroup America applicant data on lost flash drive

An unencrypted flash drive with First Transit applicants’ personal information was recently  lost on a bus in Cincinnati.

According to a notification sent to the New Hampshire Attorney General’s Office on February 4, the stick was lost on January 21.  It contained applicants’ names, addresses, dates of birth, Social Security Numbers, information about applicants’ criminal convictions (if applicable) and results of drug testing (if applicable).  The data also included employment decision and current status.

First Transit provides mass transit and transit management services throughout the United States and is a subsidiary of FirstGroup America.  It is not clear how many applicants for employment with FirstGroup America or FirstTransit had date on the stick, although only 1 person was reportedly a New Hampshire resident.

About the author: Dissent