Coca Cola sued by former employee over unencrypted laptop data theft

[InfoSec News <alerts () infosecnews org>]

http://news.techworld.com/security/3585884/coca-cola-sued-by-former-employee-over-unencrypted-laptop-data-theft/

By John E. Dunn
Techworld
13 November 2014

Coca-Cola is facing a potential class-action lawsuit after one of the 
people whose personal data was on one of a clutch of laptops stolen from 
the company says he suffered identity theft as a result of the breach.

Laptops thefts are a common occurrence for most large organisations but 
the circumstances surrounding the loss of 55 laptops over a six-year 
period from the drinks giant’s Atlanta office and a bottling firm it 
acquired were always puzzling.

Made public on 24 January this year, it turned out that an employee, 
Thomas William Rogers III, had allegedly taken the machines without their 
loss being realised. The machines contained the records of 74,000 people, 
all current or former employees, including 18,000 revealing social 
security numbers.

Coca-Cola eventually recovered some of the laptops in December 2013, at 
which point the seriousness of the breach was realised. None of the 
records on the laptops had been encrypted.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/