GE Money Backup Tape With 650,000 Records Missing At Iron Mountain - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

01:55 PM
Connect Directly

GE Money Backup Tape With 650,000 Records Missing At Iron Mountain

Iron Mountain can't find a backup tape belonging to GE Money that contains information on customers of J.C. Penney and about 100 other retailers.

"How are companies really doing when it comes to records management?" That's the question data storage service provider Iron Mountain asks on its Web site.

Really, companies -- and Iron Mountain -- could do better. Iron Mountain can't find a backup tape belonging to GE Money that contains the personal information of some 650,000 customers of J.C. Penney and about 100 other retailers. GE Money handles credit card processing for the affected retailers.

The missing data includes about 150,000 social security numbers, according to an Associated Press report.

GE Money requested the backup tape from an Iron Mountain vault in October, according to a statement issued by Iron Mountain. When the tape could not be located, Iron Mountain personnel began looking for it. The tape remains unaccounted for.

"We believe this is an unfortunate case of a misplaced tape; there has been no evidence to suggest that the media was obtained by unauthorized persons or has been misused in anyway," Iron Mountain said in an e-mailed statement. "We also understand the tape was created in such a manner to make unauthorized access extremely unlikely and difficult, even for experts with specialized knowledge and technology."

A spokesperson for GE Money did not immediately respond to a request for comment.

GE Money is reportedly paying for a year of credit monitoring service to help protect those whose social security numbers were on the tape from identity theft.

Iron Mountain, however, insists that identity theft isn't an issue. "An accidental loss of a back-up tape is not an identity theft issue or a crime; it is distinctly different from previous cases of malicious hacking or PC theft," the company said. "Since we notified GE Money of the missing back-up tape in October, there has been no evidence to suggest that any person's identity has been compromised as a result. And we don't know of any incident, ever, when a lost back-up tape has resulted in identity theft."

The Identity Theft Resource Center put the number of publicly reported data breaches in the United States at 446 for 2007. It identified 312 data breaches in 2006 and 158 in 2005. But not everyone believes data breaches are rising. A blogger who goes by the name "Dissent" recent published an analysis of data breach statistics that finds a decrease in data breaches and records exposed.

According to a study conducted by the Ponemon Institute, an independent information practices research group, data breaches cost businesses an average of $197 per customer record in 2007, up from $182 in 2006.

However, such statistics clearly don't apply in every case. By that measure, TJX's loss of as many as 94 million customer records in a breach reported a year ago would cost the company $18.5 billion, about 50% more than its current market capitalization. To judge by the company's stock performance over the past year, whatever brand damage occurred as a result of the breach hasn't significantly affected the company's revenue.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
2020 State of DevOps Report
2020 State of DevOps Report
Download this report today to learn more about the key tools and technologies being utilized, and how organizations deal with the cultural and process changes that DevOps brings. The report also examines the barriers organizations face, as well as the rewards from DevOps including faster application delivery, higher quality products, and quicker recovery from errors in production.
10 Top Cloud Computing Startups
Cynthia Harvey, Freelance Journalist, InformationWeek,  8/3/2020
How Enterprises Can Adopt Video Game Cloud Strategy
Joao-Pierre S. Ruth, Senior Writer,  7/28/2020
Conversational AI Comes of Age
Guest Commentary, Guest Commentary,  8/7/2020
Register for InformationWeek Newsletters
Current Issue
Special Report: Why Performance Testing is Crucial Today
This special report will help enterprises determine what they should expect from performance testing solutions and how to put them to work most efficiently. Get it today!
White Papers
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll