Utility may face investigation for sale of unscrubbed drives

[lyger <lyger () attrition org>]

Courtesy: InfoSec News

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9000333

Sharon Fisher
May 09, 2006

State and federal regulatory agencies have not yet determined whether
Idaho Power faces any penalties after a salvage operator offered
unscrubbed hard disk drives for sale on eBay Inc.'s auction Web site.

The utility had sold 230 disks to a salvage operator, who sold 84 on
eBay. Most of the drives have been returned to Idaho Power. The
incident was disclosed earlier this month.

The Federal Trade Commission would not confirm or deny whether the
incident is under investigation.

"In theory, there are different statutes that might come into play,
but whether it was a basis for action would depend on the underlying
circumstances," said Alain Sheer, an attorney in the division of
privacy and identity protection in the bureau of consumer protection
for the FTC, in Washington.

[...]

_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/