Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

BankRI customer information stolen along with laptop

The bank plans to install encryption and fraud-detection software

December 19, 2003 12:00 PM ET

Computerworld - Bank Rhode Island's CEO said today that her IT department plans to install encryption and fraud-detection software on computers after a laptop containing the names, addresses and Social Security numbers of about 43,000 customers was stolen from its principal data-processing provider, Fiserv Inc.
"We are making certain what limited information is on [the laptops] is encrypted. We don't think there's any sensitive information on them. But we're acting in an abundance of caution with respect to those laptops," BankRI President and CEO Merrill Sherman said.
The theft of the laptop from Fiserv also prompted BankRI to install fraud-detection software on computers at its Providence, R.I., headquarters and branch offices, Sherman said.
"This has reinforced heightened scrutiny around security. We're pretty comfortable with our policies and procedures," said Sherman, adding that she is also comfortable with measures Fiserv is taking to ensure that customer data theft doesn't happen again.
Les Muma, president and CEO of Brookfield, Wis.-based Fiserv, said the data on the laptop was password-protected but not encoded. Muma said the theft was a result of a single employee not following company policy regarding the storage of unencrypted data on laptops. The data was being used in a test scenario.
"Our internal policies are damn tight. It was a terrible mistake, and the individual has been reprimanded," Muma said, adding that law enforcement authorities investigating the crime are confident that it was simply a petty theft and the thief was unaware of the data.
The FBI, the U.S. Secret Service and local police agencies are all involved in the investigation, he said. "We keep hoping the PC will turn up, but odds are it's been fenced for money."
Sherman said that the laptop didn't contain personal identification numbers, account passwords, debit or ATM card information, or other financial data, and that fewer than 100 of its customers' account numbers were on the computer's hard drive.

BankRI, a wholly owned subsidiary of Bancorp Rhode Island Inc., has $800 million in deposits in 13 branches. The bank sent out letters to customers who could be affected by the theft, telling them that there is no risk to their bank accounts and giving them a hot line number to call if they discover any identify theft.
Jerry Silva, a senior analyst at TowerGroup in Needham, Mass., said he wasn't surprised that sensitive customer information was contained on a laptop or that it was stolen, because more enterprises are trusting mission-critical data to third-party outsourcers and they haven't stopped to consider security issues around



Security

Additional Resources

EFD vs. HDD - What You Need to Know
WHITE PAPER
Enterprise flash drives provide a new Tier 0 storage layer capable of delivering high I/O performance at a very low latency. Proper use of EFDs in an Oracle environment can deliver increased performance compared to fibre channel drives. Read the recommendations for identification of the best DB components for EFDs.
Gartner Research Report: Magic Quadrant for Application Delivery Controllers, 2009
WHITE PAPER
The market for products to improve the delivery of application software over networks remains dynamic and innovative. Vendors focused on solving enterprises' most-pressing application problems have become the top players.
Eight Criteria for Server Load Balancing
WHITE PAPER
Server load balancers are a simple yet highly effective means to scale an application environment while ensuring its availability. Today's solutions should also address application performance and security. Read about the top eight criteria you should consider when choosing a server load balancer and how Citrix NetScaler meets those requirements.

White Papers & Webcasts

Managing Macs in a Windows World
Learn to extend the capabilities of Active Directory for authentication, single sign-on and Group Policy to Macs.  

Share our Strength
Download Now  

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.