Here's a link to the DOJ release with some more specifics http://www.usdoj.gov/opa/pr/2004/July/04_crm_501.htm but to sum it up Acxiom Corporation had a huge amount of sensitive customer data available on an insecure ftp server that a spammer was able to get. Another day, another theft. When will corporations realize the value of the information they are entrusted to protect?