header image
July 9th, 2008 by dm Breaches, Vulnerabilities 1 Comments

We have written in the past of the dangers of file sharing not so much from copyright prosecution point (although the dangers are real) but so much from having the file sharing software "incidentally" share files located on the networked computer.   A high-profile data breach from the Washington, DC area confirms the dangers.  The case is about having investment and personal information of high-powered Washington, DC figures, including Supreme Court justices, shared to anybody in the world.

From the article which appeared this morning in the Washington Post:

Sometime late last year, an employee of a McLean investment firm decided to trade some music, or maybe a movie, with like-minded users of the online file-sharing network LimeWire while using a company computer. In doing so, he inadvertently opened the private files of his firm, Wagner Resource Group, to the public.

That exposed the names, dates of birth and Social Security numbers of about 2,000 of the firm’s clients, including a number of high-powered lawyers and Supreme Court Justice Stephen G. Breyer.

It is very difficult to protect against this type of breach, as it is due to human error.  Many companies have IT policies which prohibit file sharing software.  Many IT departments are successfully able to block "some" of the file sharing P2P traffic.  But there are always some who download, install, and run the file sharing software on company hardware containing sensitive information without much regard of the consequences.