JCPenney has dodged a huge bullet... until now. (a.k.a. Albert Gonzalez chat logs)

[David Shettler <dave () opensecurityfoundation org>]

http://datalossdb.org/incident_highlights/48

Now being reported in the mainstream media, JCPenney was "Company A"
in the recently infamous Albert Gonzalez trial. In court filings, we
found some attachments that seem to have been a convincing factor in
the judges decision to unseal the identity of "Company A", a.k.a
JCPenney. JCP fought hard to keep its identity concealed, but
ultimately it would seem that these attachments, as well as some
reporting by Evan Schuman made the difference.

Attachment A, filed in document 14 of the case (for those following
the case on PACER, etc.), shows ICQ chat extracts where Gonzalez and a
co-conspirator discuss JCPenney. It is damning....

[snip]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php