Quick, what would you say is the most obvious way for data to end up in the wrong hands? If you said “having the laptop on which it resides stolen”, give yourself a pat on the back. Now quick, what is one of the most preventable forms of data theft? If you said “having the laptop on which it resides stolen”, give yourself another pat on the back. You’re obviously much smarter than those in charge at U.C. Berkeley. More on that after the following rant.
It is just plain stupid, some would even argue negligent, to allow a laptop to be stolen! And yet daily, across the country and around the world, there can be no doubt that hundreds – perhaps even thousands – of laptops containing corporate and even sensitive information, are left unguarded in coffee shops, airports and hotels, to name but a few places.
It’s bad enough that people don’t take care to ensure that strangers can’t read their laptops over their shoulder when they are working in a public place on sensitive data. But to walk away from that laptop while you go to get another Double Decaf Vente Brainchillacino is just..at the risk of sounding redundant..stupid.
And let’s be real – it isn’t just public places which harbour people ready to steal your data given half an opportunity. Case in point: didn’t we just learn about people who gleefully hacked in to the admissions data for some of the top business schools in the country? And about other universities which have recently had their students’ personal data compromised? Well, not to be outdone, U.C. Berkeley – always a school game for one upmanship – managed to let a miscreant lift a single laptop which contained 98,000 records of graduate students and graduate program applicants. As much as three decades worth of such data, all sitting on a single laptop. Correction: a single, unattended laptop.
Ouch.
The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.
According to a statement made by U.C. Berkeley, “The computer was stolen March 11, 2005, when an individual entered a restricted area of the Graduate Division that was momentarily unoccupied.”
“Momentarily unoccupied.” Like the brain cavity of the person responsible for keeping the data secure.
They then go on to reassure that “We have taken immediate steps to increase our security against thefts and break-ins, and to ensure that our computers and databases are secure.”
Oh good. I know that if I were a U.C. Berkeley graduate student, alumni, or applicant, I’d feel much better. Wouldn’t you?
The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.
I was on that computer. The kicker is that I have a UC Berkeley student number. They did not have to use my social security number to ID my files. So in addition to lack of secure facility, lack of encryption there was lack of “need to know.” And when I phoned the attitude was “We don’t care, we don’t have to”
Quote:
“We have taken immediate steps to increase our security against thefts and break-ins, and to ensure that our computers and databases are secure.�
So they mean the restricted area now has a chain across the doorway in addition to the sign that says “Restricted Personnel only”.