- Nokia's new N97 vs. the iPhone
- 10 Microsoft research projects
- Hard to get justice in MySpace case
- Smartphone smackdown: Storm vs. iPhone
- Apple removes antivirus support page
It's just another in a long line of stolen laptops . . . unless you work in management at AT&T and you're worried about your Social Security number falling into the hands of identity thieves. Or, you're worried that your co-workers might find out how much -- or how little -- you actually earn.
While AT&T has declined to disclose the number of employees put at risk by the May 15 theft from an employee's car, one manager who is among them tells me he knows of others located throughout every corner of AT&T's vast empire in the United States (comments posted to Buzzblog have contended that nonmanagement workers are involved, too). "I have found one [management] individual who was not impacted," says the manager, who asked not to be named. "This is probably big, but not everyone."
"I'm very disappointed in my company," he adds. "Eight days passed before we were notified . . . and it took up to another 10 days to be informed about requesting a fraud alert and to be given instructions for signing up for credit watch."
What does AT&T have to say? In a bit we'll get to a long excerpt from a Q&A that the company provided to managers, who learned of the breach via e-mail. That e-mail read in part:
"This is to alert you to the recent theft of an AT&T employee's laptop computer that contained AT&T management compensation information, including employee names, Social Security numbers, and, in most cases, salary and bonus information. . . . We deeply regret this incident. You will soon hear about additional steps we're taking to reinforce our policies to safeguard sensitive personal information and ensure strict compliance in order to avoid incidents like this in the future."
Regrets were not enough to allay the anger of the manager I've been quoting.
"It is pathetic that the largest telecom company in the world -- with more than 100 million customers -- doesn't encrypt basic personal information," he says.
Coincidentally, AT&T announced a new managed encryption service merely days before news of the laptop theft became public.
Failure to encrypt and otherwise better protect such data is inexcusable at this point in time, says Kelly Todd, staff member at attrition.org, a security site that maintains a database of data-breach incidents.
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment