3 ms·
Obviously, just delete the file, tell your client exactly what happened and explain how you can help them secure their data better. Turn this accident into an o
by jschuur 16y ago
Obviously, just delete the file, tell your client exactly what happened and explain how you can help them secure their data better. Turn this accident into an opportunity.
Why are these things always so hard? Why bring a lawyer (who will charge money fo his services) in own it?
- muerdeme 16y agoThey are hard because there is always risk that an "obvious" decision will create civil or criminal liability. A lawyer can help you assess and mitigate that risk.
- deleted 16y ago[deleted]
- da5e 16y agoDon't forget to shred a file you want deleted.
- dkarl 16y agoWhy are these things always so hard? Why bring a lawyer (who will charge money fo his services) in own it? This is an awfully embarrassing situation for the company he's working for. They could decide to cut their losses and turn him into the police, betting that public outrage will focus on the malevolent thief instead of on their innocent security mistakes. Or, if they're more worried about their liability (possibly including liability for theft already committed by less scrupulous employees or consultants,) then one way to sweep it under the rug would be: 1. Produce a serious and viable legal threat against the poster. 2. Use the threat to make him sign an agreement never to speak another word about their credit card problem. 3. End his contract. 4. Go on with whatever they want to do (fix the problem, or not) with much greater confidence that this will never publicly surface and bite them in the ass. That wouldn't be a catastrophic outcome for the poster, but even in that situation I'd rather have a lawyer advising me.
- blaines 16y agoWhile this is embarrassing for my client, they're only using the software as a service. So I'm more worried that my client may inform the service company, which is even more embarrassing for that organization. I know my client won't be upset, after all they're having me make their new CMS, but the software as a service company might not be so kind.
- blaines 16y agoI'd like to make this an opportunity, but definitely want things done right first. Since this software isn't mine or my client's software, but a service company's, I'm a bit leery to just call them up and tell them, "Hey I have all the CC#'s for every transaction ever run through your system". So that's why I'm here asking for advice :)
- ChRoss 16y agoI think what Amanjeev suggested is correct, don't call, better email (written) so that you can have some defensive point. and choose the correct words.