OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Dataloss] UK: Customers bank details mailed to unauthorized person

From: kirniki (kirnikigmail.com)
Date: Thu Jan 22 2009 - 09:30:00 CST


http://www.walesonline.co.uk/news/wales-news/2009/01/22/fraud-expert-uncovers-security-breach-at-lloyds-tsb-91466-22748308/

Jan 22 2009

A FRAUD expert was shocked to receive a confidential letter from a
major bank – complete with the private account details of 14 other
customers.
Anne Gwilliam said that when she phoned Lloyds TSB to alert them, the
operator told her the gaffe was a "major security breach" and promised
someone would call her back.

But yesterday, Mrs Gwilliam – who wrote the fraud policy for Companies
House in Cardiff – was still waiting to be contacted.
The 47-year-old, who now runs her own cleaning business, said:
"Attached to my letter were 14 other letters with other personal and
account details and sort codes.

"I phoned the bank and was told it was a major breach."

Now the mother of three has started calling other account holders to
let them know of the blunder.
She said: "I've contacted a couple of people myself. I was able to get
their phone numbers from the internet. I've made them aware of the
situation but Lloyds does not seem too keen to have any of the
information from me. It looks like human error to me.

[..]
_______________________________________________
Dataloss Mailing List (datalossdatalossdb.org)

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml