Feeds

Boston Globe in clueless security breach

Extra, extra - read our customers' credit card numbers

Build a business case: developing custom apps

Two Massachusetts papers - the Boston Globe and the Worcester Telegram & Gazette - have apologised after exposing the credit card details of up to 240,000 subscribers. Most of those affected were Globe readers. Information security breaches by major US corporations are becoming an almost weekly event but the breach involving the two papers, both part of the The New England Media Group owned by The New York Times, was especially boneheaded.

The Telegram & Gazette (T&G) handles the distributes of both papers in the Worcester area. It recycles paper internally for use in wrapping bundles of paper sent out to retailers, all very environmentally friendly. But last Sunday delivery routing slips for an estimated 9,000 bundles of papers in the Worcester area were printed on the back of financial reports containing credit card details of subscribers to both papers (who share the same computer system). The addresses of an estimated 1,100 T&G subscribers who pay by cheque were also exposed.

How this sensitive data turned up in material to be recycled internally instead of been securely destroyed remains unclear, though it seems the material was generated from abandoned credit reporting runs. Richard Gilman, publisher of the Boston Globe said it has taken "increased security" around credit card reporting. The practice of reusing internally recycled material to wrap papers has been dropped. "We regret the disruption and inconvenience that this incident may cause," Gilman said. The T&G publisher issued a similar apology.

So far there are no reports of financial loss linked to the breach, but it's still too early to say for sure whether or not anybody will be hit. The Boston Globe has set up a helpline for concerned subscribers on +1 888 665 2644. Globe and T&G staff have also notified major credit card firms over the breach, supplying them data on potentially affected cards on request. ®

Related links

Subscriber credit data distributed by mistake, from the Boston Globe.

The essential guide to IT transformation

More from The Register

next story
Rupert Murdoch says Google is worse than the NSA
Mr Burns vs. The Chocolate Factory, round three!
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
Know what Ferguson city needs right now? It's not Anonymous doxing random people
U-turn on vow to identify killer cop after fingering wrong bloke
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.