The laptop was stolen from the company that developed the database for Pensions Trust. Data included: addresses, NI numbers, salaries and bank account details. In an all too common pattern the data was not encrypted.
It is key that if you are entrusting third-parties with your customer data that you specify the security level, and audit rights to ensure observation.
No comments:
Post a Comment