Finns urge better Wi-Fi security after bank break-in

IDG News Service - Finland called on its citizens to take more care securing their Wi-Fi networks after news emerged this week that about $245,400 (U.S.) had been stolen from a local bank using an unprotected home network.

The Helsinki branch of global financing company GE Money called on police to investigate the theft in June. The money, which has since been recovered, was stolen from one of GE Money's accounts at a local bank, said Jukkapekka Risu, investigating officer for the Helsinki police.

Police now believe that the company's 26-year-old head of data security in Helsinki stole banking software from the company along with passwords for its bank account, Risu said. Accomplices then accessed the account from a laptop computer using an unprotected network at a nearby apartment building in Helsinki's Kallio district.

They used the passwords to transfer the money to a different corporate account that they had set up six months earlier, Risu said. The thieves apparently thought that using someone else's Wi-Fi network would help cover their tracks.

Suspicion initially fell on the owner of the Wi-Fi network until police searched his apartment and determined that he wasn't involved. They then deduced from the laptop's media access control address that it belonged to GE Money, and fingers started to point toward the bank's security officer, Risu said. The MAC address had been saved in the wireless LAN's Asymmetric Digital Subscriber Line box.

"After a while, there were too many leads pointing against him, and after we found the laptop, that was it," he said.

Police are still completing their investigation, and the security officer, along with three other suspects, haven't yet been charged, Risu said. The case came to light after the Finnish newspaper Helsingin Sanomat obtained documents related to the case and published a story Tuesday.


The case will likely be sent to prosecutors next week, and charges will follow in about two months, Risu said. Despite not having been charged yet, the security officer was immediately dismissed, said Pekka Pattiniemi, general manager for GE Money in Finland. GE Money is a subsidiary of General Electric Co.

"I can confirm that our local security officer was involved," Pattiniemi said. "No harm was caused because our very good internal control mechanisms caught that the money was missing the next morning. We got it all back."

The security officer and the other suspects were held by police for several weeks. One suspect remains in custody, and the security officer is temporarily barred from travel, Risu said.

Police declined to name the

Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.