BreachExchange mailing list archives

Re: UK: Standard Life customers are hit by breach in security


From: Adam Shostack <adam () homeport org>
Date: Tue, 8 May 2007 21:29:10 -0400

They're just doing this so that their demands for more personal
information don't seem so scary.

Adam


On Wed, May 09, 2007 at 12:58:09AM +0000, lyger wrote:
| 
| (good thing they didn't have only 600 customers... a 50% impact rate would 
| have looked a lot worse in the media...)
| 
| http://news.scotsman.com/uk.cfm?id=716812007
| 
| STANDARD Life has admitted that up to 300 customers may have been affected 
| by a security breach in which personal information was sent to others by 
| mistake.
| 
| The blunder, described as a "one-off error" in its information systems, 
| caused some customers to receive policy documents meant for others. It is 
| the latest in a series of data protection breaches by big companies.
| 
| [...]
| 
| "Less than 0.2 per cent of our valued investors have been impacted by 
| this. We have acted swiftly to make investors aware of the error."
| 
| A letter explaining the error was sent to hundreds of customers over the 
| weekend.
| 
| It is thought to have affected people recently applying for new ISA 
| policies and the data included names, addresses and policy numbers but not 
| personal financial information, such as income or tax codes.
| 
| [...]
| _______________________________________________
| Dataloss Mailing List (dataloss () attrition org)
| http://attrition.org/dataloss
| Tracking more than 207 million compromised records in 649 incidents over 7 years.
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 207 million compromised records in 649 incidents over 7 years.


Current thread: