- Is Microsoft preparing us to move beyond Vista?
- Why Google wanted to lose wireless spectrum auction
- iPhone shortage fuels rumors of imminent 3G phone
- XP for cheap PCs: a second crack in the wall
- Darts into data: Leveraging random action to competitive advantage
- Most iPhone buyers are existing Apple customers
- AT&T's so-called open network principles
- Mono dev tool offered
- ActiveState upgrades IDE
- Serena plans SaaS products
September 28, 2006 | Comments: (0)
GE brings data leak trend to light
Personal data continues to spill out of high-profiles. When will anybody give a dam? (Lousy pun intended.)
The most recently reported spill comes from GE. According to reports, one of the company's employee's laptop was swiped from his hotel room early this month. The system contained personal data of 50,000 GE employees, including their names and Social Security numbers.
GE's response has been pretty typical: Employees have been notified. They don't think their data's been misused. A year of free credit-monitoring has been offered. (2006 has no doubt become a boon year for the credit-monitoring industry. For those of you who haven't noticed, a year of free monitoring has become the de facto consolation prize from companies who have let their customers' or employees' personal data become compromised.)
So it looks like data leaks really are becoming business as usual. Is that a surprise? The fact remains that companies currently have no incentive to take strides in better protecting that kind of data. There've been no reprecussions to speak of, save for a bit if bad press, perhaps. (Well, the Dept. of Veteran Affairs, which suffered some leaks a while back, is taking action by implementing encryption, but that's more for political reasons, one would think.)
Of course, some people might point to a recent survey from Pleasanton, Calif.-based analyst firm Javelin Strategy & Research: "Javelin's research showed that despite recent hype, data breaches were responsible for just 6 percent of all known cases of identity theft, compared to 30 percent from incidents like losing one's wallet," Computerworld reported.
That's all well and good, but it's certainly no reason for companies to rest on their laurels, nor for consumers to breath an easy sigh of relief. Just give cybercriminals more time, and we'll start to see an increase of clever scams using stolen data, like how we saw AT&T leaked data used recently for an intricate phishing ploy.
No, I am not trying to be an alarmist here, but I am advocating that companies start working now on strategies to plug up data leaks. I predict that eventually, a company will be held accountable when its customers and employees fall victim to identity theft, and it will have to pay through the nose.
What do you think? Should companies be doing more to protect user data? Or is it really just an overblown threat?
Posted by Ted Samson on September 28, 2006 11:46 AM
RATE THIS ARTICLE:
-

- COMMENTS
I do background checks and research on individuals within a certain demographic for a living. I see hundreds of SSN's a week and in some cases, inadvertantly memorize people's SSN's when I have to type them out a lot. Please let me assure you that seriously, no one cares about your social security number.
This isn't to say that they shouldn't be carefully guarded and that the data leaks aren't highly preventable. However, your SSN really doesn't tell me anything about you that I couldn't also find if I had been given your name plus address or DOB. Identity thieves are much more concerned with finding your credit card information than your SSN.
Posted by: Shannon at September 28, 2006 01:46 PMCredit cards can be cancelled, and you can be absolved of having to pay for what a thief bought. But if someone has your SSN and other info, they can take out cards in your name and shred your credit history.
Posted by: Ted at September 28, 2006 04:10 PMWrong Wrong Wrong. Just because you have become desensitized with regard to the danger of a leaked SSN, does not make it less important than a credit card. The fact is, with the current influx of illegal immigration, SSN's are in high demand. Pretty much, the password to most accounts are the last 4 digits of the SSN, not the address, nor the DOB. What would you rather have, a $5,000 credit bill, or a $30,000 bill form the IRS because someone used your SSN on a 1099 form? If you are elderly, do you want someone taking your SSN benefits, or claiming unemployment insurance in your name? If someone opens an account in your name without a credit card logo, you would not be automaticlly covered by insurance. The company may find you negligent should they find you leaked your own information. If you leave your checks unguarded, and the bank finds out...you are beat out of 50K. Most personal leaks come from Tax documentation. The hackers gets a double whammy. Your SSN, and the bank account your refund check goes to.
Posted by: Rian at September 29, 2006 01:41 AMRian,
I'm sorry you think that I have become "desensitized" to the importance of SSN's. On the contrary, I feel that I have a very in-depth understanding of the sorts of information you can access once you have that kind of identification.
What "accounts" are you talking about that use the last four digits of your SSN? I certainly make a point to change passwords or ID's with my SSN in them (drivers license number, for instance,) but only for the same reason the password to my e-mail isn't my dog's name-- too easy to guess.
One of the checks that my company does is credit checks. Unfortunately for identity thieves, you need much more than a SSN to apply for and receive a credit card in someone else's name. Additionally, credit card companies have checks in place that alert them to false CC's pretty quickly. Of course, it is certainly not foolproof, as my favorite afternoon TV program, Judge Judy, can attest to.
Finally, on an unrelated note, you would really be surprised by how much of your personal life is actually public information-- such as each and every one of your employments, even if it was only for a day! I certainly was shocked when I found out.
Posted by: Shannon at September 29, 2006 07:03 AMOh and also bankrupcies, debts, and court cases (!) About half of the people my company is researching have no idea they're the subject of an investigation.
Posted by: Shannon at September 29, 2006 07:08 AMTOP STORIES
ADDITIONAL RESOURCES

- Remote Access: Maintain Security and Decrease the Burden on IT
- Beyond AntiVirus: Symantec Endpoint Protection
- What Every Enterprise Needs to Know About VDI

- Help Simplify Virtualization
- Solution for Open Virtualization Provides Server Consolidation
- A Guide to Rich Internet Application (RIA) Security





