Re: AT&T laptop theft exposes employee data

[Adam Shostack <adam () homeport org>]

"Have you ever had your employer blatantly mispredict the future to
cover their own ass?  You will.  And the company that will bring it to
you..."



On Tue, Sep 04, 2007 at 06:40:04AM -0700, George Toft wrote:
| My wife got her letter.  AT&T is now predicting the future as they "have 
| no evidence that your personal information has been, or will be, used 
| for unauthorized purposes."
| 
| George Toft, CISSP
| 
| 
| 
| 
| lyger wrote:
| > 
http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=networking_and_internet&articleId=9033813&taxonomyId=16
| > 
| > AT&T and Maryland's Department of the Environment have become the latest 
| > organizations to find out first hand why security analysts for some time 
| > now have advocated the use of encryption to protect sensitive data on 
| > laptops and other mobile devices.
| > 
| > A laptop containing unencrypted personal data on current and former 
| > employees of the AT&T Corp. was stolen recently from the car of an 
| > employee of a professional services firm doing work for the company. That 
| > theft prompted the company to notify an unspecified number of individuals 
| > about the potential compromise of their Social Security numbers, names and 
| > other personal details.
| > 
| > A spokesman for AT&T today confirmed the July 27 incident and said it 
| > affected only employees of the former AT&T Corp. acquired by SBC 
| > Communications Inc. in 2005. No data involving employees of SBC, Bell 
| > South or Cingular was affected, the spokesman said.
| > 
| > [...]
| > _______________________________________________
| > Dataloss Mailing List (dataloss () attrition org)
| > http://attrition.org/dataloss
| > 
| > Tenable Network Security offers data leakage and compliance monitoring
| > solutions for large and small networks. Scan your network and monitor your
| > traffic to find the data needing protection before it leaks out!
| > http://www.tenablesecurity.com/products/compliance.shtml
| > 
| > 
| _______________________________________________
| Dataloss Mailing List (dataloss () attrition org)
| http://attrition.org/dataloss
| 
| Tenable Network Security offers data leakage and compliance monitoring
| solutions for large and small networks. Scan your network and monitor your
| traffic to find the data needing protection before it leaks out!
| http://www.tenablesecurity.com/products/compliance.shtml
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml