Hewlett Packard (HP) and Symantec are reported to be warning their workers of the potential risk of identity theft after laptops were stolen containing unencrypted personal information.
The Symantec incident occurred in October, when a laptop containing some staff names, addresses and social security numbers was stolen from an employee’s home.
It was a similar story for HP, who have revealed that several thousand employee records may have been compromised when a computer was stolen from a staff member based in Houston several months ago. This incident has only just been made public after the technology giant discovered that it was wrong in its original assessment that there was no sensitive information stored on the laptop.
Now, it’s perfectly possible of course that these computers were stolen by a common criminal, perhaps looking for high value and portable electronic equipment to sell for drug money. But the further a laptop is passed around the criminal community, the higher the chances that someone will examine the hard drive to see if they can uncover information that they can use for identity theft.
That’s why encrypting the data on your laptop is so important. You may have a computer stolen through no real fault of your own – but it is your company’s responsibility to firstly control whether sensitive data should be on your hard drive in the first place, and secondly to ensure that any confidential data is shielded from identity thieves through strong encryption.
Lets not forget – Symantec and HP are victims of a criminal act here, and it would be wrong for any of us to feel smug. Although the news must be disturbing for employees who may have had their private data revealed, the companies have done the right thing by informing the authorities, and have announced that they are reviewing their policies. No doubt they are ensuring that they have better data security policies and technology in place in future as a matter of priority.
If nothing else, stories like this can have a silver lining if they help underline the importance of encryption in securing data.