Banks lose credit card data

A computer holding UK bank customers’ credit card data has been sold on internet auction site eBay for £35.

The data belonged to customers who applied for credit cards at the Royal Bank of Scotland (RBS) and NatWest bank.

The RBS gave the computer to archiving firm Graphic Data who then “inappropriately sold” on the computer to a third party, according to an RBS spokesperson.

A Graphic Data spokesperson said the firm is conducting an investigation into how the equipment was removed from one of Graphic Data’s secure locations.

Both companies expressed their “regret” in different statements but encryption vendors are asking why the data was not encrypted.

Chief executive of Applied Security, Frank Schlottke, said: “Instead of looking at specific technologies such as laptop or USB encryption, the focus should be on encrypting files and folders at source.”

Michael Callahan, Credant's senior vice president and chief marketing officer, added: "Dealing with third-party firms is a routine business transaction, but you cannot always rely on a third party to have as stringent security systems in place as your own.”

The loss comes as new research by Infosecurity Europe finds the top challenge facing companies is data leakage prevention. From the 99 information security experts surveyed, 69 per cent rated this as their top issue.

See also:

Home Office suspends PA Consulting contract

Loss of memory stick highlights appalling security processes  22 Aug 2008

BBC partner loses children's data

Beeb apologises for Objective Productions loss  11 Aug 2008

McAfee boosts data loss toolkit

McAfee prepares £23 million deal for DLP vendor Reconnex  01 Aug 2008

EU travellers losing 3,300 laptops a week

European airports a hub for lost notebooks  31 Jul 2008

Dell tackles lost laptops

Dell to offer new services to recover or wipe lost laptops  29 Jul 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!