in

This Blog

Syndication

AlertBoot Endpoint Security

Laptop Encryption Not Used In Lost Charter Communications Laptop: Thousands Affected

Charter Communications has announced that twelve laptops—out of which one of them contained sensitive personal information—were stolen over the weekend of July 11.  Charter seems to have declined to answer any questions on what type of data security programs they were using to protect the information found on those laptops—or at least the one laptop with the sensitive information.  It sounds like perhaps laptop encryption,  a service offered by AlertBoot among others, was not used to secure the data.

 

The data in question are the details of 9,000 current and former employees.  Potentially breached information includes names, dates of birth, and Social Security numbers.  Charter has offered one year of free credit protection—and strongly recommended that employees take it up.  (A sign that information security software was not used?  Or just a company looking after the welfare of its employees?)

 

If endpoint security software was used, Charter and its employees would be better served by announcing the fact; at least that would help allay fears among a significant number of employees.  As it is, the workers are probably feeling a little antagonistic about the circumstances.  One didn’t want to sign up for the credit protection services because she’d have to submit her personal information in order to do so, which happens to be the root cause of the entire fiasco: providing personal information.  

Hmph.  I guess there’s a certain logic to that.  I mean, who’s to guarantee that credit protection services won’t get hacked?  Or that some employee will download sensitive data to his or her laptop and lose it, never mind the policies at those companies?  I mean, Choicepoint—a data aggregator—was involved in quite the massive data breach in 2004.

 

At the same time, credit protection companies cannot protect you if they don’t know what to look for (well, assuming they’re there to protect you)—so providing sensitive information is de rigeur.

 

Some continue to point out that sensitive information shouldn’t be on laptop computers.  I disagree, especially in this case.  A person who can steal twelve laptops can just as easily steal a desktop computer, perhaps two.  How can anyone in this day and age claim the size of a computer provides data security?  People need to wake up and smell the coffee.  It’s not the size of the hardware that matters, unless what one is interested is in protecting the laptop.  If one’s interested in protecting the data, then it’s time to realize that one must invest in data protection measures, like disk encryption or file encryption— the size of the computer cannot be classified as one.  

 

Related Articles:

http://www.forbes.com/feeds/ap/2008/08/13/ap5319900.html

http://money.cnn.com/news/newsfeeds/articles/apwire/1fddc15e2bb5302e7df9caa844a74c5e.htm

http://www.multichannel.com/article/CA6587530.html?industryid=47199

http://www.wyff4.com/news/17177025/detail.html

<Previous Next>

Disk Encryption Is A Better Policy Than A Word‑Based One

Disk Encryption Was Not Keeping Laptop Safe On Missing Stanadyne Computer

Comments

charter one said:

Pingback from  charter one

August 22, 2008 10:03 AM
 

types of communication said:

Pingback from  types of communication

September 4, 2008 10:38 AM
 

charter one said:

Pingback from  charter one

September 14, 2008 6:35 PM
 

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with Data Guard Systems, Inc., the leading provider of managed endpoint security services, based in New York, NY. Mr. Lee helps with the deployment and ongoing support of both the AlertBoot disk encryption managed service and the CellularManager cellular pos service for Data Guard's customers. Prior to working at Data Guard Systems, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.