CSO has the first part of a fun little article about a security breach at a company that had no security (I saw this on a post by michael at terminal23). It looks like this company, whoever they are, could write the textbook on how to make sure you get caught with your pants down. It’s scary that any classified information was involved.
I’m looking forward to Part Two.
That’s the question posed by this ComputerWorld article. Let me take a stab at answering it, using this MS Paint diagram:

University Data is the low-hanging fruit, because University admins are idiots.
Maybe I’m wrong. My data is out there in the wild – someone tried to apply for a credit card with my information a few years ago. I’m not gonna go around pointing fingers, but there’s probably an 80% chance it came out of my university. Call it an educated hunch. Educated by how bad the people in charge of the systems are. Half the time they don’t function at all; am I to believe they function securely?