follow-up: Connecticut Sues Consultant, Accenture, Over Lost Data

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.informationweek.com/news/showArticle.jhtml?articleID=201807932

By Sharon Gaudin
InformationWeek
September 20, 2007

The State of Connecticut is suing its own computer consultant, Accenture, 
for losing personally identifying information on 58 residents and hundreds 
of state bank accounts and purchasing cards.

Connecticut attorney general Richard Blumenthal announced he is suing the 
company for illegal negligence, unauthorized use of state property, and 
breach of contract. He filed the suit on behalf of state comptroller Nancy 
Wyman, whose office contracted with Accenture.

"Accenture deserves censure -- to be held accountable for allowing 
valuable secret data to be stolen and putting at risk state taxpayers, 
bank accounts, and purchasing cards," Blumenthal said in a statement. 
"Accenture acted unconscionably and illegally. It breached its commitment 
to keep confidential this highly sensitive financial information. The 
company broke its contractual promises and duty of care to safeguard the 
secrecy of sensitive data. It misappropriated state property -- taking 
significant valuable data for its own use without permission or 
authority."

Accenture released a statement saying the company is reviewing the matter.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml