Feeds

eBay hard drive spills out governor's campaign documents

A bargain at $69

Beginner's guide to SSL certificates

From the files of IT bloopers comes this cautionary tale: a California man stumbled upon a stash of confidential data belonging to the Arkansas Democratic Party after its computer consultant accidentally sold a hard drive containing the material on eBay.

Bill Ries-Knight, also an IT consultant, purchased the 120 GB Seagate hard drive for $69. Although the drive had been advertised as new, Ries-Knight quickly discovered it contained scores of files created by high-level party officials while campaigning for Mike Beebe, who successfully won the state's governorship last November.

Among the files were documents listing the private cell phone numbers of political allies, including US Senators Blanch Lincoln and Mark Pryor and US Representatives Marion Berry, Mike Ross and Vic Snyder. It also included talking points to guide the candidate as he called influential people whose support he sought.

"Lula has been a very prominent member of the Labor Community and was a leader in the African American community as well," a campaign official wrote concerning the mother of one key person to be called. "I can't really offer any advice other than stress good things about Labor." It added: "This is the second tough call" of the day.

"I looked through the actual data and thought: holy crap, there's stuff here," Ries-Knight recalls as looked through the supposedly new disk shortly after it arrived.

The parties at the center of said stupid IT blooper were Bruce Sinclair and David Qualls. Sinclair, who is director of the Arkansas Democratic Party, owned the computer, until he rather unceremoniously dropped it and killed it. Qualls, who volunteered his IT skills to the party made a valiant effort to re-image the hard drive, but ultimately failed, we're told. Things only went down hill from there.

As payment for Qualls's troubles, he got to keep the hard drive, which no one bothered to encrypt in the first place. Several months later, while Qualls was away for National Guard duty, his wife put what she thought was a brand new hard drive up for sale on eBay.

"The moral of the story: if you have sensitive information, encrypt it," Ries-Knight said. Better yet, he adds, "use a hammer. You can't do better than to actually destroy the data."

Qualls, who now holds the post of the Arkansas information department's liaison on IT matters to the governor's office, didn't return phone calls seeking comment. A spokesman for the information department declined to tell us if the governor's office encrypts sensitive information contained on laptops. He asked us for our postal address and offered to send us a written statement.

For Sinclair's part, however, the incident was a wakeup call showing just how easy it is for unsecured data to leak in the most unpredictable ways.

"This is an unfortunate situation," he told us. "I will take proper precautions in the future so it doesn't happen again." ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
SHELLSHOCKED: Fortune 1000 outfits Bash out batches of patches
CloudPassage points to 'pervasive' threat of Bash bug
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.