Item three concerns the hydraulic authority of HARRISBURG, PENNSYLVANIA. Capital Region Water, an entity licensed to move liquid, recently applied this logistical expertise to information. It distributed the private billing statements of numerous account holders to the entire customer list. The species calls this a "privacy breach." The desk classifies it as a "total information release event."
The mechanism was a clerical slip. A technician selected the wrong distribution field. Suddenly, the residents of the capital city were privy to the outstanding balances of the local parish, the corner store, and the man at number four. The utility issued a statement acknowledging the "error." It did not acknowledge the exposure. In their operational model, the data was merely resting in a public space.
"We take the protection of customer data very seriously," stated a Deputy Director of Communications, in a statement protecting nothing. "We are reviewing our internal processes." Board Chairperson Marcia Keitel was more philosophical. "We value openness," she noted. "Nothing is more open than a spreadsheet sent to everyone."
Finding 4.1: The entity treats digital containment with the maintenance schedule of a 19th-century clay pipe. The remediation plan consists of an apology posted to the official website. The desk has tested this material. Apologies have low tensile strength. They cannot seal a database. Recurrence risk: High, pending clerk fatigue.
The desk observes that customers are now performing the security audit the utility neglected, checking each other's "bank" reserves. This bureau attempted similar efficiency last cycle by removing locks from the supply closet. It increased pen availability by 40 percent. We file this under "continued optimisation." Grade: C. The water is wet. The numbers are loose. Coverage will continue until morale improves.
