May 6, 2005 (Computerworld) --
Time Warner Inc. this week said it will "quickly" begin encrypting all data saved to backup tapes after 40 tapes with personal information on about 600,000 current and former employees were lost in transit to a storage facility (see story). The incident is among the biggest in a string of recent data-security mishaps that have also affected companies such as ChoicePoint Inc., Bank of America Corp. and Reed Elsevier Group PLC's LexisNexis Group unit. A shipping container that held the 40 data tapes was lost on March 22 during a routine shipment to an off-site facility by records management and storage firm Iron Mountain Inc., Time Warner spokeswoman Kathy McKiernan said. She wouldn't provide more details. However, McKiernan did say Time Warner is trying to convince officials at Boston-based Iron Mountain to change some of their handling procedures. She declined to expand on the status of those discussions. The $42 billion New York-based media giant also said it has provided the affected employees with resources to monitor their credit reports. The lost tapes didn't include data about Time Warner customers, the company said. Iron Mountain said it has had four incidents of tapes going missing this year. In late April, Ameritrade Holding Corp. in Omaha lost a data tape with the names of 200,000 clients (see story). At the time, the company wouldn't disclose how the tapes were lost, but in an interview this week, Ameritrade CIO Asiff Hirji said that the tape fell off a conveyer belt in a shipping facility. Hirji, who wouldn't identify the carrier, said that for "whatever reason," the shipper took "a bunch" of tapes out of its original secure box and placed them into another box. Sometime after that, the second box was damaged on the conveyer belt, and four tapes fell out. "We found three," he said. "That other tape, I'm almost 100% sure, is somewhere in that facility -- probably in the rubbish bin. Or it has been destroyed in their lost and found. However, we can't take that chance. We have to assume it's lost and has gotten into nefarious hands. I'm not pointing fingers. I'm not deflecting blame. It's our responsibility." Like Time Warner, Ameritrade is taking steps to protect the confidentiality of clients whose names and/or Social Security numbers were on the lost tape. For example, the company has stepped up monitoring to detect whether any identities have been compromised. So far, Hirji said, there has been no evidence of compromised data. Hirji said Ameritrade is also looking at encrypting data on archive tapes and using shipping boxes that can't be opened so easily. Melissa Burman, director of corporatecommunications at Iron Mountain, said her company has stepped up training of employees in the handling of sensitive data on tapes. "We're doing 5 million pickups and deliveries a year; that's a huge volume. We do have incidents from time to time," she said. "We will look at every opportunity we can to make incremental improvements in our process." Moreover, Burman said, customers need to encrypt private information on their backup tapes.
"Need help sorting through the hype of cloud computing? Here's some IDC research on the benefits, barriers -- and what..."
Read more...
"Stephen Spoonamore offers more details on what I was trying to drive home in my recent column: Because individual votes..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Intercept Spam & Viruses
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs. (Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk.Register now for a complimentary trial and receive a free datasheet. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.