- Image via Wikipedia
Into The Breach; Protect Your Business by Managing People,
Atlanta Business Chronicle reported on Monday, October 26, 2009 that ChoicePoint Inc. will pay federal regulators $275,000 for a data breach in 2008 that compromised the personal information of 13,750 people and put them at risk of identify theft, the Federal Trade Commission reported.
The company, now owned by Reed Elsevier Inc., also agreed to strengthened data security requirements. ChoicePoint now must report to the FTC every two months for two years detailed information about how it is protecting the breached database and certain other databases and records containing personal information.
The moves settle Federal Trade Commission charges ChoicePoint failed to implement a comprehensive information security program protecting consumers’ sensitive information, as required by a previous court order.
In April 2008, ChoicePoint turned off a key electronic security tool used to monitor access to one of its databases, and for four months failed to detect that the security tool was off, according to the FTC. During that period, an unknown person conducted unauthorized searches of a ChoicePoint database containing sensitive consumer information, including Social Security numbers. The searches continued for 30 days. After discovering the breach, the company brought the matter to the FTC’s attention.
The FTC alleged that if the security software tool had been working, ChoicePoint likely would have detected the intrusions much earlier and minimized the extent of the breach. The FTC also claimed ChoicePoint’s conduct violated a 2006 court order mandating that the company institute a comprehensive information security program reasonably designed to protect consumers’ sensitive personal information.
The FTC’s prior action against ChoicePoint involved a data breach in 2005, which compromised the personal information of more than 163,000 consumers and resulted in at least 800 cases of identity theft. The settlement and resulting 2006 court order in that case required the company to pay $10 million in civil penalties and $5 million in consumer redress.
Choice Point Victim
httpv://www.youtube.com/watch?v=90qWVtAuE_A
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=e364c3f8-521e-44de-a154-53ab29e3d178)
November 25th, 2009 3:56 am
Nice post
April 21st, 2010 6:40 am
Hi,
I think this is the fantastic post as I have visited
May 6th, 2010 9:20 am
Hi,
This is really a nice post to give us lots of information.
July 2nd, 2010 12:13 pm
thats a hefty fine to pay. ouch…
September 29th, 2010 9:45 am
Wow, never thought this is already available. At least the company was required to pay. lol…