Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Improving Policy Compliance with Automatic Remediation | Main | Jump in Botnet Problem »

Yet Another Consequence of Lost Data: Government Investigations

Bank of New York Mellon experienced the loss of tapes as they were transported by a third party. The bank reported the tape may have contained unencrypted data on about 4.5 million people from 700 companies. That's a bad enough PR nightmare, then came the subpoenas.

The Hartford Courant reports:

Since then, New York Mellon has continued its investigation and, because the state had issued subpoenas, was obligated to tell state officials that the breach was larger than first thought.

A more recent report is that the tapes may have contained up to 12 million people's data.

Attorneys generals and other state officials must be getting tired of the same old plot line running through data loss stories: company looses data, company apologizes, customers get 2 years of free credit monitoring.

I'm betting its a good move for those on the executive career track to start listening to their IT staff who scream for better risk management and security procedures. Being named in a subpoena isn't exactly the kind of thing you want on your resume.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/830

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net