iEntry 10th Anniversary RSS Archive

IT Management Begins With Security
SecurityProNews > Insider Reports > Insider > Fidelity Fumbles, Loses Laptop, HP Data
Search:
[ insider_reports_insider ]

Fidelity Fumbles, Loses Laptop, HP Data



David Utter
Staff Writer
2006-03-23

SecurityProNews: Insider Reports Insider Reports RSS Feed


Idiot Watch VI, Hewlett Packard edition: Fidelity Investments has lost a laptop containing lots of personal data for some 80,000 HP employees.

Laptop Containing HP Data Stolen
Laptop Containing HP Data Stolen

Pretty soon technology companies are going to start requiring staffers from the financial firms they employ to handcuff their laptops to their wrists, like some courier from an old spy movie.

Considering The Register's report on the latest in an unpleasant series of "personal data versus careless financial companies," HP employees may want those laptop-toting types to be outfitted with cyanide capsules. Forcefully if necessary.

The article by Ashlee Vance noted the contents of an email HP folks likely did not enjoy finding in their inboxes:

"This is to let you know that Fidelity Investments, record-keeper for the HP retirement plans, recently had a laptop computer stolen that contained personal information about you, including your name, address, social security number and compensation," employees learned via email.

Fidelity has also set up a web site that "includes some immediate steps that you can take to protect yourself, as well as information about how to enroll for a 12-month period of credit monitoring at no cost to you and a Fidelity call center number in case you have additional questions."

The company also provided more details of the problem in a statement reproduced in the report:

"At this time, we are unaware of any misuse of the information contained in the software on the laptop," said Fidelity spokeswoman Anne Crowley. "The application was running on a temporary license from a third-party software vendor. The license has expired. Since the expiration of the license, the scrambled data would be difficult to interpret and generally unusable.

"We have taken steps to implement extra security processes requiring additional authentication for access to those HP accounts as well as other measures to prevent unauthorized use. We have also employed additional security controls above and beyond our already significant monitoring activity to identify if there is any unusual activity in these accounts. Further, we have reviewed activity in the HP accounts and have found no indication of unusual or suspicious activity."

At least Fidelity has indicated a couple of things that could mitigate the potential damage stemming from their laptop going on walkabout: higher-level account monitoring and "scrambled" data. Scrambled isn't the same as encrypted, though, and just because the data would be "difficult to interpret and generally unusable" rules out neither interpretation nor usability.

We at SecurityProNews heartily recommend Fidelity, and other firms that regularly leave valuable data laying around on laptops, spend some quality educational time reading and considering the topics and essays by security expert Bruce Schneier. Whatever in-house lessons or training on proper data security practices these companies conduct just doesn't seem to be taking hold with anyone.

---
Tags: ,

Add to | DiggThis | Yahoo! My Web

Get all the updates in RSS:





About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.

More insider_reports_insider Articles

SecurityProNews: Insider Reports Insider Reports RSS Feed


Get Your Site Submitted for Free in the World's Largest B2B Directory!

Email Address:
* URL:
*
*Indicates Mandatory Field

Terms & Conditions

iEntry Featured Services: Jayde Member Services | Forums | Freeware | Advertise with Us

Virus Warnings

Subscribe to
SecurityProNews FREE!



[ more newsletters ]

article resources
Search Articles:
[advanced search]

WebProWorld.com
Get in-touch with industry experts and leaders
Post your site for review by expert and peers
Ask Security, IT, Development and Design questions

Free Membership: Join Now!

Visit WebProWorld.com

Titan Quest Forum
The #1 Titan Quest forum
Halo 3 Forum
The best Halo, Halo 2, Halo 3 forum
Nintendo Wii
Nintendo Wii news and views
Mac Software
The best in OS X freeware
Graphics Forum
Your source for graphic tutorials
SecurityProNews.com | Breaking eBusiness News Get Your IT Questions Answered - Click Here SecurityProNews News Feeds