BreachExchange mailing list archives

Swiss HSBC data breach victim count trebles


From: Jake Kouns <jkouns () opensecurityfoundation org>
Date: Sun, 18 Apr 2010 01:07:51 -0400

http://www.theregister.co.uk/2010/04/15/hsbc_data_breach/

A French prosecutor said bank account details of 79,000 customers was
stolen from the Swiss subsidiary of HSBC, three times the number
previously admitted by the bank.

Bosses at HSBC Private Bank (Switzerland) admitted last month that
details of 24,000 bank customers were taken by an IT worker at the
bank three years ago. However, analysis of the stolen files shows that
they refer to 127,000 accounts maintained by 79,000 people, French
prosecutor Eric de Montgolfier said on Wednesday, AFP reports.

French police obtained the encrypted files after raiding former HSBC
computer specialist Herve Falciani's home in France back in January
2009. Authorities in France are seeking to use the data to investigate
suspected tax evasion by wealthy French taxpayers.

Italian authorities are also interested in the data as part of a
similar investigation into money laundering and tax evasion.

Information on 8,231 French account holders and 7,000 Italians is
contained in the stolen data cache.

Swiss regulators are investigating whether HSBC broke bank privacy
laws. HSBC has said it would refuse to help authorities hoping to use
the stolen data for tax evasion investigations.

The case has raised questions both about banking privacy and the
ethics of how far authorities ought to be allowed to go in chasing
suspected tax dodgers.
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php


Current thread: