Missing Backup Tapes Spur Encryption at Time Warner
Data security boost follows loss of info on 600,000 employees
Computerworld - Time Warner Inc. last week said it will "quickly" begin encrypting all data saved to backup tapes, after 40 tapes with personal information on about 600,000 current and former employees were lost in transit to a storage facility.
The incident is among the biggest in a string of recent data-security mishaps that have also affected companies such as ChoicePoint Inc., Bank of America Corp. and Reed Elsevier Group PLC's LexisNexis Group unit.
A shipping container that held the 40 data tapes was lost on March 22, Time Warner spokeswoman Kathy McKiernan said. The tapes went missing during a routine shipment to an off-site facility by records management and storage firm Iron Mountain Inc. McKiernan wouldn't provide more details.
However, McKiernan did say Time Warner is trying to convince officials at Boston-based Iron Mountain to change some of their handling procedures. She declined to expand on the status of those discussions.
The $42 billion New York-based media giant also said it has provided the affected employees with resources to monitor their credit reports. The lost tapes didn't include data about Time Warner customers, the company said.
Larry Cockell, Time Warner's chief security officer, added that "we are working closely and aggressively with law enforcement and the outside data-storage firm to get to the bottom of this matter."
Iron Mountain said it has had four incidents of tapes going missing this year. In late April, Ameritrade Holding Corp. in Omaha lost a data tape with the names of 200,000 clients . At the time, the company wouldn't disclose how the tapes were lost, but in an interview last week, Ameritrade CIO Asiff Hirji said that the tape fell off a conveyer belt in a shipping facility.
Assuming the Worst
Hirji, who wouldn't identify the carrier, said that for "whatever reason," the shipper took "a bunch" of tapes out of its original secure box and placed them into another box. Sometime after that, the second box was damaged on the conveyer belt, and four tapes fell out.
"We found three," he said. "That other tape, I'm almost 100% sure, is somewhere in that facilityprobably in the rubbish bin. Or it has been destroyed in their lost and found. However, we can't take that chance. We have to assume it's lost and has gotten into nefarious hands. I'm not pointing fingers. I'm not deflecting blame. It's our responsibility."
Like Time Warner, Ameritrade is taking steps to protect the confidentiality of clients whose names and/or Social Security numbers were on the lost tape. For example, the company has stepped up monitoring to detect whether any identities have been compromised. So far, Hirji said, there has been no evidence of compromised data.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Privacy White Papers
- A Road Map for Best Practice Social Media Acceptable Use Policy
- Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
- Data Protection and Disaster Recovery with iSCSI and VMware
- Get this on demand webcast now
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Privacy Webcasts