Feeds

eBay hard drive spills out governor's campaign documents

A bargain at $69

Choosing a cloud hosting partner with confidence

From the files of IT bloopers comes this cautionary tale: a California man stumbled upon a stash of confidential data belonging to the Arkansas Democratic Party after its computer consultant accidentally sold a hard drive containing the material on eBay.

Bill Ries-Knight, also an IT consultant, purchased the 120 GB Seagate hard drive for $69. Although the drive had been advertised as new, Ries-Knight quickly discovered it contained scores of files created by high-level party officials while campaigning for Mike Beebe, who successfully won the state's governorship last November.

Among the files were documents listing the private cell phone numbers of political allies, including US Senators Blanch Lincoln and Mark Pryor and US Representatives Marion Berry, Mike Ross and Vic Snyder. It also included talking points to guide the candidate as he called influential people whose support he sought.

"Lula has been a very prominent member of the Labor Community and was a leader in the African American community as well," a campaign official wrote concerning the mother of one key person to be called. "I can't really offer any advice other than stress good things about Labor." It added: "This is the second tough call" of the day.

"I looked through the actual data and thought: holy crap, there's stuff here," Ries-Knight recalls as looked through the supposedly new disk shortly after it arrived.

The parties at the center of said stupid IT blooper were Bruce Sinclair and David Qualls. Sinclair, who is director of the Arkansas Democratic Party, owned the computer, until he rather unceremoniously dropped it and killed it. Qualls, who volunteered his IT skills to the party made a valiant effort to re-image the hard drive, but ultimately failed, we're told. Things only went down hill from there.

As payment for Qualls's troubles, he got to keep the hard drive, which no one bothered to encrypt in the first place. Several months later, while Qualls was away for National Guard duty, his wife put what she thought was a brand new hard drive up for sale on eBay.

"The moral of the story: if you have sensitive information, encrypt it," Ries-Knight said. Better yet, he adds, "use a hammer. You can't do better than to actually destroy the data."

Qualls, who now holds the post of the Arkansas information department's liaison on IT matters to the governor's office, didn't return phone calls seeking comment. A spokesman for the information department declined to tell us if the governor's office encrypts sensitive information contained on laptops. He asked us for our postal address and offered to send us a written statement.

For Sinclair's part, however, the incident was a wakeup call showing just how easy it is for unsecured data to leak in the most unpredictable ways.

"This is an unfortunate situation," he told us. "I will take proper precautions in the future so it doesn't happen again." ®

Internet Security Threat Report 2014

More from The Register

next story
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
Edward who? GCHQ boss dodges Snowden topic during last speech
UK spies would rather 'walk' than do 'mass surveillance'
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
NOT OK GOOGLE: Android images can conceal code
It's been fixed, but hordes won't have applied the upgrade
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.