Laptop with Data on 600,000 People Stolen

Here’s another one…

A laptop containing personal information on about 600,000 people was stolen from an officer in the Royal Navy, the U.K.’s Ministry of Defense said on Friday.

The laptop contained information about new and potential recruits to the Royal Marines, the Royal Navy and the Royal Air Force, and was stolen in Birmingham last week, the ministry said.

The stolen data includes passport details, national insurance numbers, family details and doctors’ addresses for people who submitted an application to the forces, the ministry said. The laptop also contained bank details for at least 3,500 people.

They didn’t say whether the data was encrypted.

Also see this post about encrypting data with TrueCrypt (free open-source encryption software).

Backup Tape Lost - 650,000 Customers Affected

A backup tape containing personal information of 650,000 customers of J.C. Penney and about 100 other retailers went missing. Social Security numbers of 150,000 customers are stored on the tape. The missing backup tape was not encrypted…

The information was on a backup computer tape that was discovered missing last October. It was being stored at a warehouse run by Iron Mountain Inc., a data storage company, and was never checked out but can’t be found either, said Richard C. Jones, a spokesman for GE Money, part of General Electric Capital Corp.

Jones said there was “no indication of theft or anything of that sort,” and no evidence of fraudulent activity on the accounts involved.

Click here for the full article…

TrueCrypt Disk Encryption Software

I’m sure you’ve heard or read many stories before about laptops getting stolen containing thousands/hundreds of thousands of records on patients/customers/etc. Those records usually include very sensitive information such as a person’s Social Security Number. And a lot of times the data on those stolen laptops were not encrypted!!! Now those people are at high risk of identity theft. This wouldn’t have been such a big deal if they took an extra step of saving the data in an encrypted volume using a strong encryption algorithm. This is very easy and simple to do, too, and there are many encryption software out there.

The one I would recommend is this free open-source disk encryption software called TrueCrypt. I’ve been using this software for about a year and a half now and never had a problem with it. It’s very easy and simple to use and supports different encryption algorithms, including AES-256 (Advanced Encryption Standard, 256-bit key) which is the encryption standard adopted by the U.S. government.

My new laptop actually came with its own encryption software but I still prefer TrueCrypt better because of its simplicity. What you basically do is you create a volume using the software by specifying how much disk space you want to allocate for it, the type of encryption to use, and the volume password (make sure you choose a strong password!!!). Then this encrypted volume would look just like a regular file on your hard drive. You then use TrueCrypt to mount that volume to your OS (it will prompt you for the volume password that you created earlier). The mounted volume would look just like a regular hard disk drive and you use it just like a regular hard disk drive as well. The encryption is done on-the-fly. You can also set TrueCrypt to automatically mount the volumes on startup. TrueCrypt is available for Windows Vista (32-bit and 64-bit)/XP/20003/2000 and Linux.

You can download TrueCrypt from here for free.

Cost of TrueCrypt? $0. Cost of your stolen data falling into the wrong hands? Well, that depends, but it could be HUGE!!!