Unencrypted information in transit makes identity theft an easy inside job, says the founder of IDTheftSecurity.com
- BOSTON, MA, June 20, 2005 - (IDTheftSecurity.com) Recently, tapes containing the personal data of 3.9 million CitiFinancial customers went missing while in the custody of UPS. Other such tapes have been lost in transit this year. A Boston, Mass.-based security expert says these events show how easily criminals could conduct inside identity theft jobs.
"Massive losses of information are always egregious no matter whether events lead to identity theft," said Robert Siciliano, a nationally televised and quoted authority on personal security and identity theft. Siciliano is author of "The Safety Minute: 01" and an upcoming book, "Identity Theft Pandemic: Curing the Identity Theft Virus."
According to Enterprise Strategy Group research cited in a July 13 USA Today article by Jon Swartz, only a small percentage of financial services firms and other companies encrypt information on backup tapes. The same article quoted Rep. Edward Markey (D-Mass.) questioning the apparent lack of security measures.
"Encryption is an easy, cost-effective means to protect data from theft," said Siciliano. "Any aware citizen should be asking questions. Encryption is like "Data Security 101." It is inexcusable for large companies with the resources to implement such measures not to do so."
"Data tapes in transit can be easily misplaced," Siciliano added. "Unencrypted, they are like open books for anyone with moderate computer knowledge and unscrupulous aims."
"These are precisely the circumstances that make inside jobs easy," Siciliano continued. "Identity thieves are everywhere. Many are employed, and some identity thieves certainly understand the benefits of working for a parcel delivery service or bank."
In a June 1 article, The Wall Street Journal"s Li Yuan cited January 2005 research from Mazu Networks. The findings revealed "23 percent of 229 U.S. organizations with more than 1,000 employees had at least one internal security breach in 2004."
Yankee Group research cited in the same Wall Street Journal article indicates about two thirds of the $12 billion spent last year on enterprise security was to protect against external threats despite the growing prevalence of internal breaches.
"When it comes to security," Siciliano said, "computer networks at enterprises large and small are like some kinds of candy: hard on the outside but soft and chewy on the inside."
"The events of this past year have shown how easily massive identity theft can occur courtesy of companies" very own employees," Siciliano concluded. "The danger of inside identity theft jobs is clear and present, as we have seen with Time Warner Inc. and others."
14.12.2005 - 20:42 Source: 24-7pressrelease.com | Read: 158 X
