Date: Wed, 24 Mar 2004 10:37:33 -0600
X-PH: V4.4 (uchicago), $Revision: 1.61 $@mx01
From: Ken Hopper - NSIT <khopper AT uchicago DOT edu>
User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207)
X-Accept-Language: en-us, en
To: Michael Willey <mejw AT midway.uchicago DOT edu>,
        Ron Thielen <rthielen AT uchicago DOT edu>,
        Bill Goliak <wgoliak AT uchicago DOT edu>, Fred Johanson
<fred AT uchicago DOT edu>,
        Matt Werner <mdwerner AT uchicago DOT edu>, khopper <khopper AT uchicago 
DOT edu>
Subject: interesting story

--Back-Up Tape of Citibank Customer Transactions is Lost
(19 March 2004)
A back-up tape containing a month's worth of Japanese Citibank customer
transactions was lost while being transported to a data center in
Singapore.  The information on the tape included account holders' names,
addresses, account numbers and balances.  Citibank intends to inform
affected customers by letter.
http://mdn.mainichi.co.jp/news/20040319p2a00m0dm004000c.html
[Editor's Note (Shpantzer): Back-ups are subject to all kinds of
hazards, theft and accidental loss being only a couple on the list.
One auditor at a recent SANS conference told the group that she had
staked out a bank's back-up storage contractor, to see what kind of
vulnerabilities she could find in the process.  She saw the van pull up
to the loading dock of the storage facility, and the driver parked the
entire box of tapes on the building's generator while he took a break.
The data was gone because of the generator's electromagnetic energy.]

Fred Johanson
ITSM Administrator
University of Chicago
773-702-8464