More Scrutiny Applied To Protecting Data - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


More Scrutiny Applied To Protecting Data

Latest incident: UPS loses Citigroup tapes with data on 3.9 million customers

Companies are scrambling to encrypt data on tapes shipped to off-site centers for archiving and disaster recovery, and they're taking other steps to avoid the kinds of data-loss incidents that have been a major source of embarrassment in recent months. Last week it was Citigroup's turn, as the bank revealed that a box of tapes containing information on 3.9 million customers was lost in transit.

Time Warner last month reported that tapes containing data on 600,000 current and former employees were lost while en route to an off-site data center operated by Iron Mountain Inc. In April, Ameritrade Inc. said it misplaced a backup tape containing data on 200,000 current and former customers. And in February, Bank of America disclosed the loss of tapes containing information on 1.2 million credit-card customers.

In the Citigroup incident, a box of unencrypted tapes shipped May 2 via UPS Inc. never arrived at its destination, an Experian credit bureau in Texas. The tapes contained names, Social Security numbers, account numbers, and payment histories of CitiFinancial customers. CitiFinancial provides personal, automobile, and home-equity loans, and information on customers with closed accounts from CitiFinancial Retail Services, which provides private-label credit cards for retailers.

UPS hasn't recovered the box but says there's no indication it was stolen. Citigroup has received no reports of unauthorized activity using the data. In July, Citigroup will begin sending data electronically in encrypted form.

Since losing its tapes, Bank of America has strengthened procedures for tracking tapes and is testing several encryption processes, a spokeswoman says. Since late last year, all of the bank's data transmissions to credit bureaus have been encrypted. The bank also is sending more data to backup sites electronically instead of on tape.

IT execs at other companies aren't taking chances. Transaction Network Services Inc., which provides network services to payment processors, is encrypting personal-account and credit-card information sent across its Synapse system, which provides payment services for merchants that use wireless devices, including taxi and limousine companies, towing services, and mobile concession stands. Transaction Network Services is installing DataSecure, a hardware appliance and encryption software from Ingrian Networks Inc., in its data centers to guard against data losses like Citigroup's, says Scott Ziegler, the company's chief systems officer, referring to the Citigroup incident.

New Castle Hotels & Resorts, which manages Hilton, Marriott, Sheraton, and Westin properties, plans to encrypt customer correspondence that's backed up on tape at each hotel and stored in a safe. "Some of those letters include personal information, and that's the kind of stuff you can get nailed on," says Al Zaccario, New Castle's director of hotel technology. The company is electronically backing up other sensitive data, such as payroll files, using technology from LiveVault Corp.

Despite the brouhaha over lost data, it will take banks time to make the changes needed to prevent such incidents, says Jacob Jegher, analyst with research firm Celent Communications. The practice of shipping tapes off-site is common and unlikely to disappear anytime soon. "We're looking at a redefinition of processes," he says. "Big banks have a lot of technology and processes which take time to change."

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
State of the Cloud
State of the Cloud
Cloud has drastically changed how IT organizations consume and deploy services in the digital age. This research report will delve into public, private and hybrid cloud adoption trends, with a special focus on infrastructure as a service and its role in the enterprise. Find out the challenges organizations are experiencing, and the technologies and strategies they are using to manage and mitigate those challenges today.
Python Beats R and SAS in Analytics Tool Survey
Jessica Davis, Senior Editor, Enterprise Apps,  9/3/2019
IT Careers: 10 Places to Look for Great Developers
Cynthia Harvey, Freelance Journalist, InformationWeek,  9/4/2019
Cloud 2.0: A New Era for Public Cloud
Crystal Bedell, Technology Writer,  9/1/2019
Register for InformationWeek Newsletters
Current Issue
Data Science and AI in the Fast Lane
This IT Trend Report will help you gain insight into how quickly and dramatically data science is influencing how enterprises are managed and where they will derive business success. Read the report today!
White Papers
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll