fringe: UK hacker fined for personnel database mischief

[security curmudgeon <jericho () attrition org>]

http://www.theregister.co.uk/2010/09/08/salary_database_hack/

UK hacker fined for personnel database mischief
Email salary details to everyone ploy foiled
By John Leyden
Posted in Crime, 8th September 2010 10:26 GMT

A court has ordered a UK hacker to pay compensation after he used a 
purloined laptop to hack into his ex-employer's personnel database.

Colin Parker, 31, gained unauthorised access to staff contracts containing 
salary details and emailed this to around 400 workers at his ex-employer, 
CHI and Partners. Parker's attempt to create bad feeling among workers at 
the firm was foiled by an alert sys admin, who intercepted and deleted the 
potentially incendiary emails.

Parker, who was found responsible for the theft of a laptop and given a 
conditional discharge*, agreed to pay his ex employer CHI and Partners 
£4,000 in compensation and £3,000 in prosecution costs to settle the case 
during a hearing at Southwark Crown Court on Monday. He is liable for 12 
months' imprisonment if he fails to satisfy these conditions, a spokesman 
for Southwark Crown Court confirmed.

[..]

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php