Yesterday the Dallas Morning News reported "Three laptops, one of them containing personal information on thousands of blood donors – including Social Security numbers and medical histories – were stolen from a locked closet in the Farmers Branch office of the American Red Cross in May."
It is good to read that this data was encrypted. The report indicates the information could be decrypted with a password, though, so hopefully they had a strong password in effect. Effective and successful security all comes down to human decisions and actions, as do most information security issues. If the password was a good one, the data was probably safe…assuming it was not an insider with knowledge of the password who took the laptops.
BTW, the laptops were recovered.
Technorati Tags
information security
IT compliance
corporate governance
awareness and training
laptop theft
breach notice laws
encrypt
passwords
insider threat