Shostack + Friends Blog Archive

 

Flash Data Breach

f35.jpg

The Hartford Courant reports that a Lockheed employee dropped a USB flash drive at a gas station that contained Joint Strike Fighter information. A truck driver found it and “took it home for a 20-minute look-see, then turned it over to authorities.”

I have three words of advice: full disk encryption.

Photo courtesy of POONDOG.

One comment on "Flash Data Breach"

  • Chris says:

    Amen.
    I have a few more words: “Information classification and handling guidelines”.
    This information was “sensitive”, but not “classified” or “confidential” (all words from TFA). That’s nice to know, and it seems as though the person who had this info was allowed to have it, and it was allowed to be on removable media, etc.
    If a company has important information and lacks a clear policy about how to decide what is important, and how to handle (or not) what is deemed important, then things can get out of hand. Do your employees a favor, and work with them to develop rules that aren’t shackles, but protect the important stuff.

Comments are closed.