IT weakness might have allowed Countrywide security breach
The man accused of stealing customer data from Countrywide might have been able to download data to an external drive
CALABASAS, CA – The man accused of stealing customer data from home mortgage lender Countrywide was probably able to download and save the data to an external drive, due to an oversight by the company's IT department.
On August 1, Rene Rebollo, a former senior financial analyst at Countrywide, was arrested for his alleged role in stealing customer data and selling it.
Rebollo told US Federal Bureau of Investigation agents that he had known that the computers in the Countrywide office had security features that restricted downloads of data to an external source, but that he had found one that didn’t. FBI affidavits show Rebollo admits collecting names on request by his buyers and downloading them onto his personal thumb drive using that one computer in the office. Rebollo might have specifically collected names of people who recently declined an offer of a loan by Countrywide, for example.
The accused estimates that, over a two-year period, he downloaded approximately 20,000 customer profiles each week and sold files with that many names for US$500, according to the affidavit. The profiles included Social Security numbers and other personal details.
Countrywide's owner, Bank of America, has not responded to a request for information about the type of security it employs to prevent this type of theft. According to a statement from the FBI last week, Countrywide says it is analysing the stolen data to determine whether any customer identities have been compromised. If they have, the company says it will notify the customers affected.
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Regulation
Ruled out: can regulators settle the pre-hedging debate?
Market participants are at odds over the practice and whether regulation or principles can settle the score
SEC streamlines overhaul of stock trading rules
Tick size and access fee rules simplified from first draft, but Peirce still questions rationale
Supervisors use generative AI to tame ‘chaotic’ data
Officials merge credit databases with unstructured reports to sharpen bank oversight, explains Banco de España ex-deputy
EU banks fear loss of NSFR repo relief
European Commission must decide by next June; other jurisdictions adopted softer calibration
Running the numbers on Barr’s Basel III endgame revisions
Fed vice-chair’s plan to ease capital requirements for big banks still lacks critical details
Endgame manoeuvre: US banks put SLR reform back in spotlight
Plan to ease Basel III brings renewed focus to impact of leverage ratio on US Treasury market
Regulators want to fix AT1s. Investors want restraint
Tweaking the instrument that regulators love to hate may be the only way to prevent its abolition
More disclosure touted to temper pre-hedging ills
Transparency could help investors choose a dealer, but will they use the disclosures?