OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Dataloss] Judge: Firm not negligent in failure to encrypt data (fwd)

From: lyger (lygerattrition.org)
Date: Wed Feb 15 2006 - 17:54:41 CST


Forwarded from another mailing list. With 550,000 customers apparently
contacted... has anyone heard of this incident before now?

Date: Wed, 15 Feb 2006 10:31:55 -0500
Subject: Judge: Firm not negligent in failure to encrypt data

http://news.com.com/2100-1030_3-6039645.html

A federal court has thrown out a lawsuit that accused a
student-loan provider of negligence in failing to encrypt a
customer database that was subsequently stolen. Stacy Lawton
Guin, a customer of Brazos Higher Education Service, sued
the corporation on the grounds that encryption should be
used as a routine security precaution. But U.S. District
Judge Richard Kyle in Minnesota dismissed the case last
week, saying Brazos had a written security policy and other
"proper safeguards" for customers' information and that it
acted "with reasonable care" even without encrypting the
database.

[...]

_______________________________________________
Dataloss mailing list
Datalossattrition.org
https://attrition.org/mailman/listinfo/dataloss