JACKSONVILLE, Fla. — Social Security numbers have been exposed for all to see on the Duval County Clerk of Courts website.
Action News Jax uncovered a security flaw that may have exposed families to identity fraud.
Action News Jax started on the Duval County Property Appraisers website, where a link sent us to the Duval Clerk of Court, where we found Shane Turcotte's Social Security number along with two others on an old deed. The document was filed back in the 1990s.
Action News Jax also found another link that lead to a document containing private information. The revelation was more than an annoyance for Turcotte.
"Someone stole my ID and made purchases under my name," Turcotte said. "They got $2,000 worth of iPhones and walked out the door."
The purchase was made in July at a Walmart in Yulee. The same thing happened in Virginia Beach, but instead of using his information, the thieves used his wife's Social Security number. He now thinks the mistake led to their identities being stolen.
"It was like a light went on," Turcotte said.
Action News Jax emailed Clerk of Court Ronnie Fussell's office and included screen shots of what we'd uncovered, asking for an interview. However, when we didn't hear back, we went to the courthouse.
According to policy, our cameras weren't allowed inside, but a clerk's office spokesperson admitted to the mistake, saying the Social Security numbers were now blacked out. Action News Jax checked and found that to be true.
"They did it because of you, in my opinion," Turcotte said.
Action News Jax law and safety expert Dale Carson said it's the job of the person filing the documents to make sure Social Security numbers are excluded. The Clerk's Office said the same thing in an email after declining an interview.
According to the clerk, they're directed to make its best effort to keep the numbers confidential.
"By statute, they're not liable for any inadvertent disclosure," Carson said when asked about the city's liability and if they be sued.
Latest News Headlines from Action News
"Get online and check your own documents," Turcotte said.
The Clerk's Office said it runs newly filed documents through a system that searches for sensitive information. However, more than 27 million pages have been filed with the office since 1988.
Carson said in many cases, documents were just transferred over and might not have been checked.
This is the full statement issued to us by the clerk's office: "First, I would like to thank you for providing a couple of examples. The example records you provided have been reviewed and redacted. Clerk Fussell is sensitive to these concerns and has been committed to his custodial duty of maintaining confidential information as a top priority since taking office in 2013. The Clerk's office has a great responsibility to provide the public access to all court records and official records that they are entitled to, while balancing the equally heavy burden of protecting exempt and confidential information contained within those documents.
"Since this is a very broad-reaching task, Florida lawmakers address the issue of social security numbers as it applies specifically to Official Records in FS 119.0714. The statute places the responsibility on the filer to exclude social security numbers from filings into the official records, unless required by law, and on the number holder to request that existing social security numbers be removed through a written request.
"The county recorder (Clerk's office) is directed to 'make its best effort' to keep social security numbers confidential and are not liable for the release of social security numbers. The Duval County Clerk's office runs all newly-filed documents through auto-redact software that automatically alerts the clerk employee to what may be exempt or confidential information, including social security numbers or a bank account, debit, charge, or credit card numbers. Our office is continually pursuing technological advancements to help mitigate fraud. We are working on website revisions that will allow citizens to notify us if they find confidential information in a document. We are also working on a system that would allow citizens to sign up for notifications if a document is filed in their name.
"The applicable laws as they currently stand reflect two things – there is a need to protect this information, and the parties associated with these documents have a role in helping to doing so.
"To give you a snapshot of the how many historical documents exist in the official records for Duval County:
• From 1988-current, there have been approximately 8.7 million documents filed into the Official Records, which total approximately 27.1 million pages
• From 1977-1988, there are approximately 8.4 million pages stored on microfilm
• From the late 1800s to 1977, there are at least 4.8 million pages that are not imaged at all, rather they are still stored in the original books
• From the late 1800s to the 1950s, there are separate Deed Books containing approximately 1.4 million pages
• From the late 1800s to the 1950s there are separate Marriage License books containing approximately 86,000 pages
Clerk Fussell cannot answer to the methodology that the prior administration used for retroactively redacting records when the law caught up with technology. We do not know the direction that was given on how far back to review documents for redaction.
"What he can answer for is how things are handled now. As resources become available and we are able to digitize these historical images, they are redacted using the latest laws and redaction standards. However, based on sheer volume, and continued budget cuts, our current focus is to accurately redact and record the current workload that is filed in our office daily and to promptly process the requests for redactions on historically filed documents.
"The Clerk's Office could use the public's help in this task. Many have gotten into the habit of checking their credit scores. In the same manner, Clerk Fussell recommends that all citizens verify that there is no sensitive information contained in their documents in the official records that could make their identity vulnerable by logging in to http://oncore.duvalclerk.com and doing a name search.
"Please note that the above information pertaining to FS 119.0714 has long been posted on the Clerk of Courts' website, as required by the statute:
http://www.duvalclerk.com/ccWebsite/publicRecordExepmtionNotices.page
"Also available on that webpage are multiple forms available for individuals to statutorily request that information be made confidential, which includes the following as it pertains to your inquiry:
https://www.duvalclerk.com/ccWebsite/resources/adobe/requestForRemovalOfSsnOrAccountNumbersForm.pdf
For Action News on the go, sign up for Action News Mobile & Email alerts
WJAX
