in

This Blog

Syndication

Tags

News

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Archives

AlertBoot Endpoint Security

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Data Encryption Software: Tapes With Sensitive Data Falls Off Truck, Rammed Into Oblivion

Officials in Cuyahoga County, Ohio are looking for a box that contains data tapes with the personal information of 300 people.  Fortunately, drive encryption software was used to secure the  contents of the tapes, so the chances of a full-blown data breach are minimal, if not impossible.

According to reports, a driver for Iron Mountain--a company that stores documents, and has been involved in data breaches in the past (which, is bound to happen on a statistical basis.  These guys do a lot of business)--dropped a container from his truck as he was speeding away.

The entire incident was caught on a security camera.  Then, another car came around and knocked the box (don't people believe in swerving anymore?) out of the camera's line of sight.  By the time the Iron Mountain employee came back to search for the box, it had disappeared.

The county--in a brilliant move--had already encrypted the contents of the tapes prior to packing them and handing them over for storage.  I say brilliant because:

  • The act has prevented a data breach, a real one, from occurring (depending on a person's point of view, the loss of the tapes may be considered a data breach regardless of the fact that encryption prevents access to the information).

  • Iron Mountain had an incident about two years ago where GE's tapes went missing while under storage (actually, I'm assuming this Iron Mountain is also that Iron Mountain).  While it's impossible to tell who was responsible for that past breach, I think everyone involved can agree that not having the tapes encrypted was a colossal mistake because it's that much easier to glean information from the tapes.

When it comes to data security, encryption could very well be the last line of defense when everything else fails.  Unlike locked storage facilities, encryption software is a data-centric security tool.  In other words, it protects data by being part of the data--without the right password, it's impossible to separate the protection from the information.

This differs with data protection solutions like physical locks, where a sledgehammer could easily separate the protection from the information.

I wonder how much the county was prompted to encrypt their data because of that one data breach that plagued Ohio.  There was the case of the intern that left tapes in his car overnight, and resulted in all OH state workers having their names and SSNs breached.  The same incident then added another 225,000 names and SSNs, proving that when it comes to data, you should be rather safe than sorry....


Related Articles and Sites:
http://blog.cleveland.com/metro/2009/08/cuyahoga_county_officials_sear.html
http://datalossdb.org/incidents/2308-cuyahoga-county-officials-are-searching-for-a-box-that-fell-off-a-truck-and-contained-personal-information

 
<Previous Next>

Drive Encryption Software Better Than Fake Newspaper Laptop Case

Skype Encrypts Your Calls, Trojan Gets Around It

Comments

No Comments

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.