Today's realities, y'know?

[Chris Walsh <cwalsh () cwalsh org>]

Interesting article on how delay in breach notification due to  
ongoing law enforcement activity can play out.  Uses Wells-Fargo as  
an example.

http://www.dfw.com/mld/dfw/news/consumer_news/14634439.htm

I didn't realize W-F had been hit at least seven times since 2003:

 From the article:

In November 2003, a laptop stolen from a consultant contained  
confidential information about 201,000 Wells Fargo customers.

In February 2004, a computer theft from a rental car driven by two  
bank employees involved data of nearly 38,000 customers.

In March 2004, a computer theft from a bank office involved data for  
35,000 Wells Fargo customers.

In October 2004, four computers stolen from the office of a bank  
affiliate involved personal data for 460,000 Wells Fargo customers.

In November 2004, Wells Fargo told customers that three computers  
with personal loan and mortgage information had been stolen from an  
Atlanta office.

In April 2005, Wells Fargo notified customers that personal account  
information might have been sent to other customers by mistake.


The latest one is another stolen computer.


_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/