Thursday, February 14, 2008

Are You Doing Enough to Protect Your Company’s Bottom Line against Fallout from ID Theft? Laptops with P2P a Key Exposure

Data security breaches will grow in importance as a business issue, reports 2008 ITAC Report on ID theft.

Fall out from the TJX Companies, Inc. data breach, in which 45.6 million credit and debit card numbers were stolen from one of the company’s systems, continued throughout 2007, according to the Washington-based non-profit Identity Theft Assistance Center. This is a stark reminder of how information security can impact a company’s bottom line.

According to Ernst & Young's 10th annual Global Information Security Survey, 64 percent of the senior executives they surveyed said legal compliance was the top driver for security, followed by 58 percent who identified privacy and data protection as security’s number driver.

In September last year over 5,000 social security numbers and other personal information on customers of a bank were exposed over a P2P file sharing network. A former business analyst joined a file sharing network where people trade music and video. Work-related information that she had downloaded onto her personal computer was inadvertently shared.In June over 17,000 social security numbers of current and former employees of a company were exposed by a laptop owned and used by an employee. The employee's spouse used a P2P file sharing program and inadvertently shared documents containing the personal information.

For more on the ITAC story click below:

http://www.strategicrisk.co.uk/story.asp?storycode=368850
http://www.identitytheftassistance.org/