Feeds

ABN Amro customer deets tip up on BearShare

P2P user hygiene found lacking

Secure remote control for conventional and virtual desktops

Social security numbers and other sensitive information belonging to more than 5,000 customers of ABN Amro Mortgage Group have been leaked onto the BearShare file-sharing network by a former employee, according to news reports.

The information, which also included names and mortgage details, appear to have been leaked after a former business analyst for the company installed the file-sharing software on her PC and proceeded to share a large swath of her hard drive with the entire network. Included with five spreadsheets containing the ABN Amro customer data were a resume and travel documents belonging to the woman, who was located in Florida, according to Dow Jones.

"For an identity thief, a find like (this) is a gold mine," Robert Boback, chief executive of Tiversa, told the newswire. "This would provide years of content for them to perfect their crimes."

A spokesman for Citigroup, owner of ABN Amro Mortgage, said company officials were investigating the reports.

It's the second recent incident to underscore how careless some computer users are with file-sharing programs. Several weeks ago, a Seattle man was charged over allegations he used the LimeWire and Soulseek P2P networks as conduits for identity theft. According to court documents, Gregory Kopiloff, 35, used personal information he pulled off other people's computers to establish bogus credit card accounts and fraudulently purchase thousands of dollars of merchandise.

Most file sharing programs allow people to share as much or as little of their hard drive contents as they wish. The breaches seem to be the result of users who designate files stored in personal folders to be available for others to download.

This lack of hygiene hasn't gone unnoticed by scammers. More than one billion searches are conducted daily over P2P systems, and a good number of them involve bank names and the words "password," according to Boback, whose firm offers data-leakage protection services. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.