6 ms·
Short synopsis: Employee at Boeing wanted a hand formatting an Excel spreadsheet, so he emailed it to his wife (not a Boeing employee) so she could help him out
by cyberferret 10y ago
Short synopsis: Employee at Boeing wanted a hand formatting an Excel spreadsheet, so he emailed it to his wife (not a Boeing employee) so she could help him out, but she discovered that there were hidden columns in the spreadsheet containing extremely sensitive information for 30,000 employees.
Kudos to Boeing for handling this in an open manner. I am learning that there are actually protocols in place for reporting this sort of breach, as well as legislative requirements in different countries/states that outline what needs to be done and communicated to the victims of the breach.
- turbohz 10y agoworrying thing is, this needs voluntary breach reporting? Talk about low standards...
- apetresc 10y agoWhat could they reasonably do to somehow "automatically" detect this?
- aliasnexus0 10y agoData Loss Prevention (DLP) tools could be installed on the mail servers to scan every email and email attachment before they leave the corporate network or are delivered to ensure there are not any SSNs, credit card numbers, birthdays, etc. present.
- deleted 10y ago[deleted]
- pm24601 10y ago> Kudos to Boeing for handling this in an open manner Not hardly. What is Boeing doing putting PII in hidden fields in the first place.