Iowa – Jeb Bush Posts Emails Containing Social Security Numbers Of More Than 12,000 People

Iowa – By posting online all of his personal email from his eight years as Florida’s governor, Jeb Bush sought to show himself as a tech-savvy executive, in touch with constituents and an active administrator.

But tucked away in a small percentage of those hundreds of thousands of messages were the names, birthdates and Social Security numbers — the three pieces of information key to identity theft — of more than 12,000 people, according to an independent firm.

Bush’s attempt to demonstrate transparency comes as he prepares for a likely presidential run in 2016. His political action committee, Right to Rise, wasn’t involved in the email-posting effort, a Bush spokeswoman said.

“This was obviously very innocent,” said Todd Feinman, the chief executive of data security firm Identity Finder who audited the Bush email database and provided the results to The Associated Press. “But now we have more than 12,000 individuals who are exposed to the risks of identity fraud.”

Using the website jebemails.com, Bush posted the emails online Tuesday. While Bush’s spokeswoman said the emails numbered about 275,000, Feinman said his audit showed about 333,000 messages.

By Thursday, the private information from all but a few hundred of the emails had been removed, Feinman said.

Bush spokeswoman Kristy Campbell wouldn’t confirm Identify Finder’s report that more than 12,000 people had their private information in the emails but said that “we have redacted every account that we have found.”

Florida’s public records law is among the nation’s strongest, and the state’s archive kept copies of every email sent to and from Bush’s personal email address while he served as governor from 1999 to 2007.

Bush had taken some steps to keep some of the sensitive information in the emails out of the public’s view. His team asked the Florida Department of State for the emails in order to set up the website. When doing so last May, his attorney specified “Social Security numbers of Florida citizens who contacted Gov. Bush for assistance” should be redacted.

A spokesman for the Florida Department of State did not reply Thursday to phone and email messages from The Associated Press.

Social Security numbers are confidential under Florida law, except under certain circumstances, including allowing such information to be shared between agencies. The vast majority of those included in Bush’s emails were part of a spreadsheet tracking the number of people on a state family service waiting list, which was included in a PowerPoint presentation sent to Bush ahead of a 2003 meeting.

“This is the wake-up call to organizations, because they forget that hidden data is still there for the stealing,” Feinman said.

The Social Security Administration, Internal Revenue Service and Federal Trade Commission, among other federal agencies, all warn consumers not to share such information, which in combination can allow thieves to open bank accounts, apply for tax returns and even apply for jobs.

It’s a message that’s been well received by the public. According to a November survey by the Pew Research Center, 90 percent of Americans consider Social Security numbers “very sensitive” — nearly twice the number of those who characterize their health care information that way.

While Bush was scrubbing what had been posted, there were still other ways to access the emails online as late as Thursday afternoon. Weeks before Bush posted the emails, others had also obtained them from the Florida state archive and made them available on the Internet.

One such group was the Democratic opposition research group American Bridge, which posted the emails to its website in December. Spokesman Ben Ray said Thursday that the group was in the process of removing the data.

“We want to be responsive to the privacy concerns,” Ray said.

American Bridge took the page down late Thursday and was no longer linking to the files publicly, but the files could still be reached online via cached versions of the webpages.