Search / 181 posts tagged DataLoss

How do you estimate a security measure to decide whether or not to invest in it? In traditional risk management, it's a matter of calculating annualized loss expectancy (ALE). If that is a term that wasn't cooked up by non-security professionals, I don't know what is.

The Connecticut Attorney General is ripping into Bank of New York Mellon over missing tapes containing up to 12 million customer's personal information. In an earlier post I speculated that attorneys generals and other state officials must be getting tired of the same old plot line running through

When Scotland’s Sunday Herald proclaimed “Revealed: 8 million victims in the world’s biggest cyber heist,” they appeared to be wrong on a few counts.  Even if  they had been correct that every Best Western hotel guest’s data  had been stolen, that would not have made the breach the world’s biggest

An awfull start of the day :( Written by Arnan on August 30, 2008 – 12:34 pm I wanted to look up some data today from my Ethernet disk and it didn’t respond, this is not so weird since it’s a bit sluggish at times… So i tried my imac which connectes automatically instead of via Finder… It came up with the error that the user was unknown or the drive not responding.

Whilst writing a recent post on IT Pro the notion came to me that we may be losing the grip of our business data. The time was when data was precious, it was stored and processed on our physical site and all manner of controls are in place to ensure it stays where it is supposed to be.

Bank of New York Mellon experienced the loss of tapes as they were transported by a third party. The bank reported the tape may have contained unencrypted data on about 4.5 million people from 700 companies. That's a bad enough PR nightmare, then came the subpoenas.

It’s Time to Think Differently About Protecting Data Posted by: Bill Ledingham in Best Practices Topic:

Update to my post below about data protection regulations not protecting the consumer. There was an article (linked here) in yesterdays Sunday Business Post that contained the sub-headline of “Payments group claims data protection law prevents naming of shops and restaurants”.

An employee swipes an old system from his company and sells it for crack money on EBAY. On the old system is unencrypted information on credit card transactions and personal information of more than a million persons. This would have been the motherlode for scammers and fraudsters.

In yet another major data-loss fiasco, details of all prisoners in England and Wales, including tens of thousands of offenders, were lost in a memory stick that held the data in an unencrypted format. A staff member for the contractor PA Consulting who is thought to be responsible has been suspended.