Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Paper Trails Matter | Main | Theft in On Line Games »

Customer Sues Best Buy for $54 Million Over Lost Laptop; Protecting Your Own Data

Network World is running a story about a Best Buy customer whose laptop was lost by the electronics store's service department. The customer is quoted in the article as saying, the biggest problem is:

Best Buy's systematic disregard for its customers' personal information and potential exposure to identity theft

One has to ask, if there is important information on that laptop, what measures did the customer take to protect it before turning over the laptop?

The customer's blog lists more serious allegations about false statements and falsified records. If true, that's the real story and the more serious problem for the company.

No one would argue that Best Buy doesn't have a responsibility to protect customer's assets entrusted to them. At the same time we can't leave sensitive, private or valuable information unprotected. The owner of a $2,000 laptop might know the hard drive contains $1,000,000 worth of intellectual property. I doubt a technician can tell the difference between that laptop and one that used to surf the Web and take notes in staff meetings.

The signs at the repair desk of a local computer store in my town sums it up: "Backup your data. We are not responsible for lost data." They can't replace my data and they can't assess the value of that data and make an informed decision about assuming the risk of protecting it. That's my job.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/632

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net