Family Video Stores Private Information in Public Restrooms
Technorati Tag: Security Breach
Date Reported:
9/5/07
Organization:
Family Video
Contractor/Consultant:
None
Victims:
Employees and job applicants
Number Affected:
Unknown
Types of Data:
Name, address, telephone number, Social Security number, and job history
Breach Description:
A former store manager reports that she worked at several Family Video stores and every one of them stored confidential information regarding employees and job applicants in public restrooms.
Reference URL:
http://www.wjactv.com/news/14053118/detail.html
Report Credit:
WJAC Channel 6 News
Response:
From the online article depicted above:
"A former store manager told Channel 6 News she worked at several Family Video Stores in the region and all of the stores kept private information from employees and applicants in the public restroom."
[Comfyllama] Why the restroom and why in all of the stores? It almost sounds like a recommended corporate practice. This is almost comical until you think of the consequences.
"people who applied and worked at stores in Altoona, Latrobe, Somerset, Greensburg and Indiana had sensitive information in boxes in the restrooms and could be at risk for identity theft."
"Officials at the corporate office for Family Video said they are fixing the problem and it is against their policy to keep private information in boxes in the bathroom."
[Comfyllama] Good policy! "Thou shalt not store confidential information in the bathroom." So many times policy states things that "normal" people would say is common sense.
"They also said this is not just a problem in Pennsylvania, but at Family Video stores in other states as well, and they are making sure to notify all stores so the private information is not stored where the public has access."
"Officials at Family Video did report the boxes in the Johnstown location were sitting on a shelf 8 feet from the ground, and in order for anyone to gain access to the files they would likely have to stand on something to get into them."
[Comfyllama] Funny. Not too unlike stating that a stolen laptop was password protected.
Commentary:
I do not believe that there is any law that requires the company to notify victims in this case, but I am not positive. Family Video is a private company based in Glenview, IL. They have 4,000 employees in 14 states and 450 stores. If this is/was a problem in many stores then this could equate into a pretty substantial breach. I just don't get it sometimes.
Past Breaches:
None
Date Reported:
9/5/07
Organization:
Family Video
Contractor/Consultant:
None
Victims:
Employees and job applicants
Number Affected:
Unknown
Types of Data:
Name, address, telephone number, Social Security number, and job history
Breach Description:
A former store manager reports that she worked at several Family Video stores and every one of them stored confidential information regarding employees and job applicants in public restrooms.
Reference URL:
http://www.wjactv.com/news/14053118/detail.html
Report Credit:
WJAC Channel 6 News
Response:
From the online article depicted above:
"A former store manager told Channel 6 News she worked at several Family Video Stores in the region and all of the stores kept private information from employees and applicants in the public restroom."
[Comfyllama] Why the restroom and why in all of the stores? It almost sounds like a recommended corporate practice. This is almost comical until you think of the consequences.
"people who applied and worked at stores in Altoona, Latrobe, Somerset, Greensburg and Indiana had sensitive information in boxes in the restrooms and could be at risk for identity theft."
"Officials at the corporate office for Family Video said they are fixing the problem and it is against their policy to keep private information in boxes in the bathroom."
[Comfyllama] Good policy! "Thou shalt not store confidential information in the bathroom." So many times policy states things that "normal" people would say is common sense.
"They also said this is not just a problem in Pennsylvania, but at Family Video stores in other states as well, and they are making sure to notify all stores so the private information is not stored where the public has access."
"Officials at Family Video did report the boxes in the Johnstown location were sitting on a shelf 8 feet from the ground, and in order for anyone to gain access to the files they would likely have to stand on something to get into them."
[Comfyllama] Funny. Not too unlike stating that a stolen laptop was password protected.
Commentary:
I do not believe that there is any law that requires the company to notify victims in this case, but I am not positive. Family Video is a private company based in Glenview, IL. They have 4,000 employees in 14 states and 450 stores. If this is/was a problem in many stores then this could equate into a pretty substantial breach. I just don't get it sometimes.
Past Breaches:
None
Posts Atom 1.0
Comments