CNET employees notified after data breach

By Robert McMillan, IDG News Service |  Security, data breach 2 comments

More than 6,500 CNET Networks employees and relatives are being notified of a possible data breach after burglars stole computer systems from the offices of the company that administers the Internet publisher's benefit plans.

CNET was one of several clients affected when burglars broke into the Walnut Creek, California, offices of Colt Express Outsourcing Services, stealing equipment "which contains the human resources data of several of their clients including CNET networks," CNET Senior Vice President of Human Resources Jose Martin said in a June letter notifying employees of the incident.

The computers contained names, birth dates, Social Security numbers and employment information of the beneficiaries of CNET's health insurance plans.

It was unclear which other Colt Express clients were affected by the breach. Its other customers have included BroadVision, JDS Uniphase and 24 Hour Fitness.

The company's CEO, Samuel Colt III, did not return a call seeking comment Monday, but in a letter to CNET, published on the Web site of the attorney general for the state of Maryland, he said that local police were investigating the matter.

Data breaches such as Colt's must be reported to the Maryland attorney general when they affect state residents. State laws typically require such notification when an unencrypted computer is lost or stolen. According to Privacy Rights Clearinghouse, more than 230 million records have been exposed in this fashion in the U.S. over the past three-and-a-half years.

Four days after the break-in, Colt Express installed an alarm system, and the company is "looking into what additional steps may be taken to provide enhanced security," Colt wrote in his letter.

Customers looking for free credit-monitoring services from Colt Express should not get their hopes up, however.

Colt's letter included some marketing materials for Kroll, a company that helps companies respond to data breaches, but the information was provided "only out of courtesy and to give you an idea of the types of services available," Colt said.

"By this letter and enclosures we are providing you with all the information we believe you need and that we are able to give you," Colt added. "We do not have the resources financial and otherwise to assist you further."

Hurt by a downturn in business late last year, Colt is now in the process of going out of business, he said.

Affected CNET employees can sign up for one year of free credit-monitoring from Equifax, Martin said.

2 comments

    Anonymous 3 years ago
    An excellent and timely article: It's amazing that breaches and thefts keep happening. There is something that is helping a lot of people, judging by the business blogs I’ve been reading. It’s a defined eCulture called The Business-Technology Weave - it helps to influence employee behaviour as regards security, use and integrity of data - as well as protection of hard assets (such as laptops). The book I.T. Wars is the leading voice, and concentrates on the solution – a proactive treatment and training of people, and reinforcements to their corresponding security awareness. This is particularly relevant: www.businessforum.com/DScott_02.html . Some good stuff here too: www.david-scott.net . We use his book at work - stupid mistakes like deleted and misplaced data have dropped tremendously. Our CEO even requires our vendors to read it.
    Anonymous 3 years ago in reply to Anonymous
    Ha - one of our interns from University of WI brought that book in. good stuff.

      Add a comment

      Post a comment using one of these accounts
      Or join now
      At least 6 characters

      Note: Comment will appear soon after you have activated your account.
      Obscene/spam comments will be removed and accounts suspended.
      The information you submit is subject to our Privacy Policy and Terms of Service.

      ITworld LIVE

      SecurityWhite Papers & Webcasts

      White Paper

      Overcome Top 7 Admin Challenges of Active Directory

      As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

      White Paper

      Insiders Can Ruin Your Company. Take Action.

      Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

      White Paper

      Top Solutions and Tools to Prevent Devastating Malware

      Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

      White Paper

      Streamline Compliance and Increase ROI

      Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

      White Paper

      X-Ray of the PCI Process-4 Proactive Steps

      This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

      See more White Papers | Webcasts

      Ask a question

      Ask a Question