Chase Bank recently lost a backup tape containing their customer’s personal information including social security number, name and address. They said that there’s no evidence that the tape has been used, but how do they know.
Here’s a link to the letter they sent to their customers:
The letter states that you need special equipment to read the tape, but if there’s no risk for the tape to be viewed, then why are they offering free credit monitoring service?
To learn more about the misconception that backup tapes need special equipment to view them, read “6 Common Misconceptions About Compromised Backup Tapes.”
I see this type of article too often:
Ex-Mitsubishi UFJ Unit Worker Arrested for Data Theft
How is your data protected from internal theft?
An employee of the New York Police Department’s pension fund has been accused of stealing 8 backup tapes with social security numbers and direct deposit account information for over 80,000 NYPD.
The employee was the former Director of Communications. He stole the tapes after disabling the video surveillance from the backup data warehouse where these tapes were being stored.
If a Director of Communications can get into the data storage warehouse, disable the cameras and steal 8 tapes, imagine how easy it is for your IT department to swipe the tapes before they ever leave your office. You may never know they are missing!
Company who identifies themselves as ‘The Premiere Media Vaulting Facility in the State of Arkansas’ lost a backup tape containing names, date of birth, social security numbers and addresses for 807,000 people who have had criminal background checks over the last 12 years.
Danny Palo, the chief operating officer of the data-storage company, stated in an article on thecabin.net (http://www.thecabin.net/stories/022109/loc_0221090013.shtml) “Since all the data was backup serving as copies of the original data the Department of Information Systems holds in its own facilities there was no data lost, and a copy was quickly made to replace the tape.”
Actually there is data lost (or stolen) – the social security numbers and names of the 807,000 people affected.
They also state that there’s no evidence of criminal activity and the attempt would have been very difficult because two forms of electronic security need to be passed before reaching the files in a massive vault, which is set up like a library where only workers can access the tapes.
How do they know that one of their workers did not steal or misplace the tape? It happens more often than you’d probably expect.
If a company specializing in computer backup vaulting can lose your tape, then who can you trust with it?
Hello! Welcome to the first blog from losttapes.org. This blog was set up to discuss the latest news on data breaches and compromised backup tapes. Check out losttapes.org for headlines, news, articles, and more on lost and stolen backup tapes.
Data breach incidents are increasing every year. In a report from the Identity Theft Resource Center, as published in the Washington Post, data breaches were up almost 50% in 2008 exposing personal data on over 35.7 million Americans. Published recently in Dark Reading were details on the new Ponemon Institute report “U.S. Cost of a Data Breach” showing that the cost of a data breach continues to rise as well. In 2008 the average cost of a data breach grew to $202 per compromised record.
With all of the technology available today it’s a shame to hear that breaches continue to rise.
We hope you find our blogs to be insightful. Please feel free to join us on this topic by posting your comments.