Feeds

Pfizer worker data leaked via P2P

Privacy cock-up for Viagra makers

Internet Security Threat Report 2014

Casual use of file sharing by the spouse of an unnamed Pfizer worker has been blamed for leaking personal information on more than 17,000 current and former employees at the pharmaceutical giant.

Unauthorised installation of a P2P package on a company laptop led to the exposure of worker data, presumably after a directory holding the information was inadvertently offered up for sharing to world+dog.

Similar breaches involving misuse of the popular Winny P2P protocol on corporate PCs have been recorded in Japan, but the Pfizer case is the first of its kind in North America.

The breach prompted Pfizer attorney Bernard Nash to send a letter to attorneys generals in states where potentially hit workers live, apologising for the problem and promising to offer workers a year of free credit monitoring, at a reported cost to the firm of $25,000.

The Connecticut Attorney General's Office has followed up this letter (PDF) with requests for more information about the breach, which affected 305 Pfizer workers who are resident in the state.

Pfizer has also written to workers to warn them that their names and social security numbers might have been exposed to potential fraud. ®

Internet Security Threat Report 2014

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.