[ISN] Stolen: Google's employee records

From: InfoSec News <alerts_at_private>
Date: Fri, 4 Jul 2008 04:18:58 -0500 (CDT)

By Brendon Chase
03 July 2008

Google has confirmed that personal data of US employees hired prior to 
2006 have been stolen in a recent burglary.

Records kept at Colt Express Outsourcing Services, an external company 
Google and other companies use to handle human resources functions, were 
stolen in a burglary on 26 May. An undisclosed number of employees' 
details and those of dependents such as names, addresses, and social 
security numbers were on the stolen computers. It is understood that 
Colt did not employ encryption to protect the information.

It's still unclear how many more of Colt Express' clients were affected 
by the breach. CNET Networks (publisher of ZDNet.com.au and Builder AU) 
was another company affected by the burglary with around 6,500 
employee's details stolen.

Although there is no evidence of misuse of the data to date, the 
information obtained could be used by ID thieves to create fake accounts 
and identities.

It's only come to light now that Google was one of the companies 
affected. Google itself was not burglarised, nor was any of its internal 
systems compromised.


Attend Black Hat USA, August 2-7 in Las Vegas, 
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings 
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com
Received on Fri Jul 04 2008 - 02:18:58 PDT

This archive was generated by hypermail 2.2.0 : Fri Jul 04 2008 - 02:28:26 PDT