> I know a while back there was some dentist storing patient information in a unsecured FTP account. There are thousands, if not millions, of people doing busi

> I know a while back there was some dentist storing patient information in a unsecured FTP account. There are thousands, if not millions, of people doing business like this. When I was shopping around for a home mortgage, a broker that I knew by personal family recommendation had me send tax returns to hername@isp and I, figuring that this stuff could land anywhere regardless of whether the broker operates so sadly, applied AES to the PDF and sent it on over, calling by phone to provide the password. I guarantee 99% of her clients don't bother. And I wouldn't be the least bit surprised to learn that she renamed the saved file on her computer to include the password.