Share

Related Stories

  • Astaro offers free firewall version of its UTM system
    Unified threat management firm Astaro is offering a free version of its UTM product, focusing on firewall functions and targeting SMBs.
  • Campaign Monitor hit by hacker server incursion
    Campaign Monitor, the Australia-based email marketing software developer, has warned users of compromise to its servers that took place over last weekend.
  • US standards drive Canadian information security
    An absence of legislation and the presence of the laissez-faire attitude has resulted in Canada being rather lax when it comes to information security compliance. Robin Arnfield looks at how US standards are driving the Canadian information security marketplace
  • Two US companies own up to breaches
    On a regular basis, companies are having to own up to data breaches. HealthNow New York and MTV Networks are just the latest two making security gaffes.
  • The Good, the Bad, and the Ugly Insider Threats
    Whether intentional or unintentional, insider threats take many forms. The (ISC)² US Government Advisory Board Executive Writers Bureau examines this dichotomy and how it is being affected by both regulatory considerations, and the rapidly changing technology landscape
    Members' Content

Top 5 Stories

News

Two US companies own up to breaches

14 March 2008

On a regular basis, companies are having to own up to data breaches. HealthNow New York and MTV Networks are just the latest two making security gaffes.

Recently, files containing confidential data on about 5 000 employees at MTV Networks were illegally accessed by someone outside the company, according to the network. The security breach occurred when data was compromised over an internet connection on an employee’s computer.

While the company declined to provide any information about how many employees were affected or what the nature of the compromised information was, an internal memo from executive vice president for human resources at MTV Networks Catherine Houser, stated the personal information in the files included names, birth dates, social security numbers and compensation data.

MTV is currently conducting an investigation in connection with the breach.

Parent company, Viacom said police have launched a criminal investigation and the company is offering credit-monitoring to alert and protect the identities of the affected employees. MTV did not release further details of the attack.

HealthNow NewYork alerted some 40 000 members in Western and Northeastern New York State that they may be at risk for identity theft after a former employee’s laptop computer went missing with confidential information several months ago.

The parent, Blue Cross BlueShield of Western New York, sent letters to affected customers last week, according to a report in The Buffalo News.

According to that report, the potential information included names, dates of birth, social security numbers, addresses, employer group names and health insurance identifier numbers.

The laptop was not encrypted but did have security features such as the requirement to enter the user’s identification number and passcode after 15 minutes of inactivity. The company also shut down the laptop’s access to the corporate network and said it had not detected any activity from the laptop since its disappearance.

HealthNow New York has reconfigured its claims software system and has tightened its policies and procedures about use of laptops and other mobile devices.

These latest events are small compared to the most significant breach this decade at retailer TJX, which was acknowledged by the company in January 2007.

Data thieves broke into the companies processing servers and removed credit and debit card information on more than 100 million accounts.

This article is featured in:
Internet and Network Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.