Fired worker charged in ID theft, child porn

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.chron.com/disp/story.mpl/hotstories/6460321.html

By TOM FOWLER
Houston Chronicle
June 5, 2009

A former Gexa Energy employee has been indicted and faces charges of 
identity theft related to a breach of the electric retail company's 
customer database and possession of child pornography.

Steven Jinwoo Kim, 39, was arrested Thursday and released on $75,000 
unsecured bond Friday after making an appearance before Magistrate Judge 
Calvin Botley. He is set for arraignment next week.

According to a statement from the U.S. Attorney's Office, in April and May 
2008 Kim illegally accessed a Gexa database that had customer and billing 
information and "issued codes and commands to damage" the database, 
leading to more than $70,000 in losses for the company.

He also allegedly transferred a database table with information on 
"thousands of Gexa Energy customers." Despite the breach investigators say 
they have not found any "exploitation of the GEXA customer's identities."

Kim is also accused of having child pornography on his personal computer's 
hard drive.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php