Laptop security: Do companies care?

By Scott Bradner, Network World, 06/12/06

 Start a discussion    Print article

 Comments (1)    Print article

Over the past few months there has been an unremitting drumbeat of news stories about vast amounts of data being lost when corporate laptops are stolen. In almost all these cases, the data on the laptop was not encrypted, but that is not the real problem.

Google gets 8.2 million hits for the search "laptop+stolen" and Google News gets 1,700. Some hits point to software or devices to protect laptops against theft or to track them when they're stolen. Too many, however, are about laptops being stolen; far too often those laptops contain confidential information on thousands of people.

The latest example comes from Ernst & Young, which had a laptop stuffed with information about more than 240,000 Hotels.com users stolen. Apparently, this happened awhile back, but Ernst & Young did not have the honesty to admit its stupidity publicly until The Register started nosing around.

This is not the only laptop Ernst & Young has let slip through its fingers this year. Earlier, four company laptops were stolen from a conference room while the auditors who were supposed to protect them were off at lunch.

That happened shortly after another employee managed to lose his laptop containing the Social Security numbers of some customers' employees. Ernst & Young refuses to say how many people were threatened by that loss.

Ernst & Young is hardly alone in its zeal to expose others' confidential information, then not fess up. There is the marvy case of the Department of Veterans Affairs employee who for years had been taking home disks full of Social Security numbers and other information on veterans (26 million, as it turned out). It took the department weeks to break the news when the data finally was stolen.

Other recent examples include a Fidelity laptop with Social Security numbers and other data for about 200,000 HP employees and a Wells Fargo laptop with information on "a relatively small percentage" of Wells Fargo's millions of customers. (Apparently, Wells Fargo, like Ernst & Young, thinks providing incomplete information is not the same thing as lying.)

Featured Whitepapers

True Enterprise-Quality Linux Support: Edison Group White Paper

Grid Computing White Paper: Oracle Grid Solutions for the Next-Generation Data Center

Manage your data more efficiently, economically, and ecologically with zero risk-start saving today.

LinuxCast Listen to the latest Linux news.

About Us | Contact Us | Advertising Info | Terms of Service/Privacy

Copyright, 2006-2007 Network World, Inc. All rights reserved.