Paula Bennett must explain why she has taken a "dont ask, wont tell" approach to contacting people affected by the most recent kiosk security breach, Labours Social Development spokesperson Jacinda Ardern says.

A "damning" report, released on Friday, found that 7307 items had been downloaded from two Work and Income-based computers. 1430 of the items contained personal information, including "highly sensitive information" of 10 people.

"Accordingly the Ministry of Social Development said it would work with the privacy commissioner to inform the small group of people it determined had highly sensitive material accessed, but it appears no one else. Others worried about possible privacy breaches should call the Ministry, it said.

"If Paula Bennett is concerned about slack and sloppy processes within her department, then she needs look no further than that. That sort of dismissive attitude deserves a please explain from the minister.

"The 6748 clients affected by privacy breaches at ACC were all contacted, either by phone or letter, and offered an apology. What is different about the issue with MSD?

"Given the Ministry serves 1.1million clients, the idea that all of those with concerns should be contacting it rather that it dealing directly with those effected is not only insensitive, it's stupidly inefficient.

"Ms Bennett has previously refused to answer questions on how many people have contacted her office with concerns around security breaches, claiming it would take substantial collation and that calls are not logged.

"If thats the case, then she should have thought about the security around these kiosks and followed best IT practice before she ever rolled them out.

"Because that never happened, the least Ms Bennett can do is apologise to everyone who had any personal details accessed," Jacinda Ardern said.

Read the original post:
Don't ask, won't tell not good enough - Ardern