Sophos Security Blog recently posted a not so surprising syndicate that sells customer information from supposedly secure financial institutions.
The article goes on to say…
According to the Daily Mail an undercover investigation in India has uncovered that some call center workers have been selling confidential informationon nearly 500,000 Britons.
Undercover reporters from The Sunday Times met with two individuals who claimed to be IT workers who offered to provide them with 45 different types of data gathered from the victims.
Information offered up included names, addresses, phone numbers and credit card details (including CCV/CVV codes and expiration dates).
The reporters allege they could purchase the records for as little as 2 pence apiece ($0.03 USD). One of the…
"These [pieces of data] are ones that have been sold to somebody already. This is Barclays, this is Halifax, this is Lloyds TSB. We’ve been dealing so long we can tell the bank by just the card number."
They claimed to have information on mortgages, loans, insurance policies, mobile phone contracts and television subscriptions. Much of the information was “fresh”, or less than 72 hours old.
Menlo Technical prides itself on offering up protective strategies to seriously minimize these kinds of data leaks through adjusted HR policies, enforcement of such policies, improved network designs, upgraded and monitored endpoints and employer / employee awareness.