Steve, are you referring to my website or the Virginia Division of Information Resources? Their were no lenders forms in this breach. The forms that required the SSN's were the application forms to get an insurance agents license. In other words, it was required by the state and subsequently published on the Internet by the state. The licenced agents are the victims here. They had no choice but to give their Social Security numbers if they wanted to sell insurance in Virginia.

I think the state should be held responsible for this breach of security just as companies like Choicepoint were held responsible. Odds are the state of Virginia will  face multiple lawsuits for this breach, just as Choicepoint did for their breach.