April 30, 2005

It turns out that most large corporations, including major financial institutions, do not encrypt data stored on backup tapes sent to third parties for storage. Tapes containing sensitive customer information have already been lost or stolen from companies like Ameritrade and Bank of America. These tapes make an extremely tempting target for criminal networks of identity thieves. In many cases, these tapes are handled by low paid workers at companies operating off-site storage facilities. An article at SecurityFocus looks at this problem in depth.

Here are the Links

The SecurityFocus Article