BreachExchange mailing list archives

Re: Employee vs client data?


From: "B.K. DeLong" <bkdelong () pobox com>
Date: Mon, 16 Oct 2006 12:04:53 -0400

Right - I would guess, (with credit and your permission), that Attrition &
PogoWasRight.org would switch to your data set or at least import the data
you've collected into their database.

On 10/16/06, Allan Friedman <allan_friedman () ksgphd harvard edu> wrote:

> It would be cool if we could begin distinguishing whether it was
employee
> data that was lost or client data, (or both).

There's a field for data subject my data. I also note the presence of
a principle-agent relationship for data protection, for when a third
party is safeguarding the data on behalf of the {employer/merchant}.
Finally, the data subject could have no direct or transitive
relationship with the data subject (i.e. Choicepoint).  I only have it
for publicly traded companies, though.

I hate to keep this stuff as a shadow dataset, but since exact date
and sequence of info is critical to our project, it's taken longer
than expected to make sure it's good.  We really look forward to
sharing it soon.

allan
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 137 million compromised records in 430 incidents over 6
years.




_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 137 million compromised records in 430 incidents over 6 years.



Current thread: