Biting the hand that feeds IT
Biting the hand that feeds IT
|
|
Original URL: http://www.theregister.co.uk/2007/05/15/ibm_missing_tapes/
Add IBM to the growing list of ostensibly tech-savvy organizations that has been bitten by its failure to encrypt sensitive information.
A company spokesman has confirmed that computer tapes containing personal information on former employees has gone missing. An outside vendor was transporting them from one IBM facility to another on February 23. It seems there was a traffic accident, and in its aftermath, the tapes could no longer be located at the scene, spokesman Fred McNeese told the Associated Press. The tapes also contained information relating to customer accounts.
Word is just now leaking out because IBM's human resources department recently wrote letters to those whose information is missing. The company also advertised in a local paper seeking the return of the tapes.
It seems that encrypting sensitive information is a lot like flossing teeth. Despite the relative ease and undeniable benefits, many of us stubbornly refuse to get in the habit. (McNeese said some tapes were encrypted but others weren't.) Other organizations that have also famously flouted their better judgment include the Department of Veterans Affairs, which lost personal information relating to 28 million people, and TJX, whose failure to secure a wireless network and encrypt transactions allowed thieves to siphon 45.7 million credit and debit card numbers.
McNeese refused to say how many tapes were missing or how many employees and clients were affected. He said there is no indication any of the missing information has been exploited. ®
Privacy breach nuked in Canadian passport site (4 December 2007)
http://www.theregister.co.uk/2007/12/04/canadian_passport_site_breach/
IBM goes big green with Big Green (22 May 2007)
http://www.theregister.co.uk/2007/05/22/ibm_project_big_green/
IBM polishes grid for healthcare providers (17 May 2007)
http://www.theregister.co.uk/2007/05/17/ibm_updates_gmas_grid_system/
Pirate Bay plundered by hackers (14 May 2007)
http://www.theregister.co.uk/2007/05/14/pirate_bay_hacked/
Roche exposes medical details on website (11 May 2007)
http://www.theregister.co.uk/2007/05/11/roche_exposes_medical_details/
Lax security led to TJX breach (4 May 2007)
http://www.theregister.co.uk/2007/05/04/txj_nonfeasance/
TJX finds self at bottom of 300-bank pig pile (26 April 2007)
http://www.theregister.co.uk/2007/04/26/tjx_suit/
Feds urge tougher ID theft laws (24 April 2007)
http://www.theregister.co.uk/2007/04/24/id_theft_plan/
Data collation can evade Data Protection Act (17 April 2007)
http://www.theregister.co.uk/2007/04/17/data_collation_outside_dpa/
How much do security breaches cost anyway? (12 April 2007)
http://www.theregister.co.uk/2007/04/12/breach_cost_estimate/
Laptop thefts expose 40,000 Chicago teachers (9 April 2007)
http://www.theregister.co.uk/2007/04/09/chicago-teachers_security_breach/
UCSF computer security breach affects 46,000 (maybe) (4 April 2007)
http://www.theregister.co.uk/2007/04/04/ucsf_computer_security_alert/
Account pretexters plague Xbox Live (23 March 2007)
http://www.theregister.co.uk/2007/03/23/xbox_live_pretexting/
© Copyright 2008