Seems that GE Money lost backup data for JC Penny's recently, with some 650,000 customers information. JC Penny's stated they believe that there is 150,000 social security numbers contained in the backup.
I am curious, so if there is an obvious answer I am overlooking please educate me: Why does JC Penny's have social security numbers to 150k customers? This strikes me as odd.
And this one is interesting also ... a laptop stolen from a Royal Navy Officer contained banking account information, mortgage payment information, medical claim information and a lot more. And I am tired of asking this question, but why was this on a laptop outside the facility? And it was a military officer ... why was the data not encrypted?
Re: Yet more data losses; JC Penny & British Royal Navy
Why does JC Penney's have SS#'s?
Easy. They offer the JC Penney charge cards.
Why isn't the naval officer's laptop not encrypted? Easy. Probably
because there's no requirement for it to be; unless there's a rule, it
won't be followed. Either that, or this information does not meet the
classification level that requires encryption?
(anyone know if there is a mandate/rule that the RBN's laptops be
encrypted?)
/Hoff
Re: Yet more data losses; JC Penny & British Royal Navy
Chris,
Thanks for the post. A couple of people have now pointed out that JC Penny's offered Credit Cards, which is also probably why GE Money was involved. I probably should have realized that, and may have if I had not been distracted by Mr. Hirsch and Old Man Winkle having a heated argument in my living room Saturday night.
I also should have included the other dozen rhetorical questions on the Royal Navy theft ... why was the data there to begin with, why was it un-obfuscated, etc, to which you would probably have the same response. I keep thinking that this problem could avoided in so many ways ... it's becoming a bad joke.
Thanks for the post. A couple of people have now pointed out that JC Penny's offered Credit Cards, which is also probably why GE Money was involved. I probably should have realized that, and may have if I had not been distracted by Mr. Hirsch and Old Man Winkle having a heated argument in my living room Saturday night.
I also should have included the other dozen rhetorical questions on the Royal Navy theft ... why was the data there to begin with, why was it un-obfuscated, etc, to which you would probably have the same response. I keep thinking that this problem could avoided in so many ways ... it's becoming a bad joke.
Comments