Richard Bejtlich has posted a nice summary of two recent mass identity thefts over at TaoSecurity.

You can read the details over there, but even if you don’t, remember his excellent point down toward the bottom:

These two cases also demonstrate my security mantra that prevention eventually fails. Therefore, we need to have robust detection and response mechanisms in place.