BreachExchange mailing list archives

fringe: Classified Hong Kong "watch-list" leaked on internet


From: security curmudgeon <jericho () attrition org>
Date: Mon, 12 May 2008 09:31:05 +0000 (UTC)


[The term "travel document information" is vague. If this meant passport
  information, this would qualify for inclusion in DLDOS for example. -  jericho]


---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.topnews.in/classified-hong-kong-watch-list-leaked-internet-240641

By Sahil Nagpal
TopNews.in
May 9th, 2008

Hong Kong - A government investigation was underway Friday after it was 
revealed that confidential files from the Immigration Department had been 
mistakenly leaked on to the internet.

The list, which contained a list of the names of people for officers to 
watch, plus travel document information and travel records, has been 
available on the internet since Monday through a file-sharing programme 
called "Foxy."

The blunder occurred after a newly-recruited immigration officer working 
at the Lok Ma Chau border point took home some old classified files to 
study without authorisation.

[..]

Earlier this week, banking giant HSBC was forced to apologise to customers 
after it admitted it had lost the data of 159,000 accounts from a Hong 
Kong branch.

The data was held on a internet server which is understood to have gong 
missing in April from the Kwun Tong branch of the bank while it was 
undergoing renovation last month.

[..]

In one case, a USB flashdrive containing the files of 10,000 patients from 
the Prince of Wales Hospital was lost after a hospital worker who was 
transferring the data left it in a taxi.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml


Current thread: