Москва Антихрист

Thursday, 6 March 2008

Keep an Eye on Subcontractors

Tim Wilson, the site editor for Dark Reading, points out that there has been a spate of high-profile incidents in which companies compromised partners’ data.

IndyStar.com reports that names, addresses, Social Security numbers and other data of 51,000 patients of St. Vincent Indianapolis Hospital were made vulnerable by Verus, a firm that was working on a medical billing site for the institution.

Verus was implicated in another recent incident. In New Hampshire, personal records of more than 9,000 Concord Hospital patients were viewed eight times while they were posted on the Internet for a month-and-a-half. In a Concord Monitor report, the institution’s president and CEO says a search to replace Verus is under way and that a decision hadn’t been made on whether to sue the company.

In some cases, the loss clearly was not accidental. In May, an employee for Alta Resources, a company that fulfills orders for the Disney Movie Club, stole sensitive data — including credit card numbers — of customers. Disney would not comment to InfoWorld, but a letter reportedly sent to victims by a vice president said that the employee tried to sell the information to law enforcement authorities.

No comments: