DaytonDailyNews.com

COLUMBUS — A 22-year-old part-time intern working for the state left a computer back-up tape with 64,467 state employees' personal data in his Chevy Cobalt overnight at his Hilliard apartment complex Sunday night.

The next morning, Jared A. Ilovar discovered that the tape, as well as his radar detector, were gone, according to a police report.

The simple car break-in triggered a mad scramble among top state officials and a four-day comb through 300,000 files to determine what was on the tape.

The Ohio Highway Patrol, which is now investigating the theft, was not notified until 2:30 p.m. Thursday, and state employees weren't told about the security breach until an e-mail blast was sent Friday morning.

Initially, the Strickland administration declined to disclose Ilovar's name.

"I'm not looking for a scapegoat, certainly not an intern scapegoat," Strickland told reporters at a hastily called press conference.

But state officials later released the Hilliard police report and Ilovar's personnel file.

Ilovar, who could not be reached Friday, earns $10.50 an hour, working for the Office of Budget and Management on a massive computer system that tracks business functions such as personnel, financials, and procurement. Ilovar, a student at DeVry University in Columbus, was hired March 5.

In Ilovar's office, policy calls for storing a copy of backup data off-site and he had been inappropriately designated to store the data in his home, according to the governor's office. Strickland issued an executive order that state information technology managers immediately review policies to make sure information is secure at all times.

Strickland said because the data is on a specialized medium, it's highly unlikely it could be accessed by someone without the necessary equipment and knowledge. Employee names and Social Security Numbers were on the device.

The state is arranging for identity theft prevention services be made available to employees for a year.

Contact this reporter at (614) 224-1624 or lbischoff@DaytonDailyNews.com.

Timeline of events (per OBM Director Sabety). All times are approximate.

Sunday, June 10 , evening: Theft occurred from employees vehicle of data storage device that backs up onsite network

Monday, June 11, morning: Employee reported theft to supervisor

Monday, June 11, morning: Supervisor instructed employee to report to police

Monday June 11, afternoon: Supervisor advised OAKS project manager

Monday June 11, noon: Project manager informed Chief Information Officer of theft, unsure of risk

Monday June 11, afternoon: Chief Information Officer informed Chief Privacy Officer and requested he coordinate

Monday, June 11-Thursday,June 14: OAKS project manager began work to analyze file using backup #1 to assess level of risk...3 days for 300,000 files and 24,000 folders

Tuesday June 12, 9 a.m.:Chief Privacy Officer asks for precise detail from OAKS Project manager

Tuesday June 12, 3:30 p.m.: OAKS Project manager reported that it appeared that employee names and SSNs were present; unsure how many employees were affected

Tuesday June 12, 3 p.m.: Chief Information Officer informs OBM Director

Wednesday June 13, 9 a.m: OBM Director informs Gov's Office senior staff who were present at morning meeting

Wednesday June 13, 9 p.m.: OBM Director inquires with Chief Privacy Officer on whether we had a certain answer on how many state employees were affected

Thursday June 14, 9 a.m. OBM Director updates Gov's senior staff who were present at morning meeting

Thursday June 14, 10:47 a.m. OAKS Project Manager informs Chief Privacy Officer and Chief Information Officer that he has determined that all state employees names and Social Security numbers are included in device

Thursday June 14, noon: OBM Director meets with DAS Director and CIO to brief them

Thursday June 14, 1:30 p.m.: Governor informed and meets with OBM/DAS/OIT team to make decisions on how to proceed

Thursday June 14, 2:30 p.m.: Governor requests Ohio Highway Patrol to get involved