Guide to the TechWeb Network


The InformationWeek -- Blogs
Security

Topics:   Security

  • Email this page E-mail this page
  • |  Print this page Print this page
  • |   Bookmark and Share

Connecticut Attorney General Blasts Bank Of New York Mellon


Posted by George Hulme, May 22, 2008 06:33 PM

It's happened again. Another backup tape with millions of customers' information has gone missing. The tape was lost on Feb. 27, and the Connecticut authorities want to know more.

According to a letter from the State of Connecticut's Attorney General, Richard Blumenthal, 10 unencrypted (yes, unencrypted) backup tapes were placed in a truck for "safe" delivery to a secure storage facility. The lock at the back of the truck was busted. And, only nine tapes made it to their planned destination.

Here's what the (unencrypted) tapes contained, according to Attorney General Blumenthal's letter:

BNY representatives informed my office that the information on the tapes contained, at a minimum, Social Security numbers, names and addresses, and possibly bank account numbers and balances.

In the letter, available here, the attorney general asks the bank a series of 12 questions that aim to get to the bottom of this incident, as well as any other possible incidents.

I just have two questions: Why has it taken so long for the loss of this backup tape to become public? Why wasn't the tape encrypted?

Perhaps the tape is just misplaced. Perhaps it fell out of the truck and rolled down a sewer. Perhaps only nine tapes where placed on the truck in the first place. Or maybe, a bad guy busted the lock and grabbed a tape. The broken lock on the truck points to an uncomfortable likelihood that the tape was stolen, and all 4.5 million customers should have been notified right away.

Of course, all of this could have been avoided by scrambling the information on the tape. Of all the things companies can do to protect your information, encrypting backup tapes is one of the most straightforward. The problem is, too few companies, including banks, care enough about your information to take the time, or spend a few extra bucks, to make sure it's managed safely.

« Bizarro World: Line Forms At NYC Apple Store For No Reason | Main | OGD1: The Open Source Graphics Card »



Tomorrow's CIO: Do you have what it takes?
Find out at the 2008 InformationWeek 500 Conference
Sept. 14-16, St. Regis Resort, Monarch Beach, Calif.


Sign up now for the weekly InformationWeek Blog Newsletter.


This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.






  1. Sarah Palin's Babygate And The Future Of Journalism
  2. Apple Nixes 'Pull My Finger' App, Even Though It's A Gas
  3. Windows Vista: The OS About Nothing
  4. One Unlikely Browser Controls The Market
  5. NYC Store Sells BlackBerry Bolds For $1,300 Each


  1. Radical Desktops Deliver Power To The People. But What About IT?
  2. Need Disaster Recovery On The Cheap? Think Virtualization
  3. No Virtualizing Without A License
  4. Smart Stuff: The State Of Business Intelligence 2008
  5. Down To Business: Are Technology Leaders Focusing Too Much On The Small Stuff?
  6. Rolling Review Wrap-Up: Vendors' RFP Responses Make The Case For Switching

 
 

  Ars Technica
Boing Boing
Channel 9 Forums
CRN Blogs
Dr.Dobb's Portal: Blogs
Engadget
Gizmodo
GrokLaw
  Lifehacker
Schneier on Security
Slashdot
TechCrunch
Techdirt
Techmeme
Valleywag

  FEBRUARY 2008
JANUARY 2008
DECEMBER 2007
NOVEMBER 2007
OCTOBER 2007
SEPTEMBER 2007
AUGUST 2007
JULY 2007
  JUNE 2007
MAY 2007
APRIL 2007
MARCH 2007
FEBRUARY 2007
JANUARY 2007
DECEMBER 2006
NOVEMBER 2006