US and Canadian data breaches cause concern

LOSSES & LAWSUITS

The loss – and the massive potential security breach it may have caused – is being investigated by Canada's privacy commissioner Jennifer Stoddart. It was also reported extensively in the Canadian media.

"My office is committed to carrying out a thorough investigation into this matter and to ensuring that preventive and corrective measures are put in place so that this does not reoccur," Stoddart said in a statement.

CIBC said there is no evidence to suggest the lost backup file has been "inappropriately accessed". However, the bank will be notifying all affected clients by letter, compensating them for monetary loss arising directly from unauthorised access of personal information contained on the file, and providing affected clients with the opportunity to enroll in a credit monitoring service at no cost.

The lost data comes at the same time as US retailer TJ Maxx announced that customer credit card data had been stolen from one of its computers in May 2006. The breach was discovered in December 2006, and it is believed that more than 200,000 customers are affected. US banking associations and politicians have waded into the discussion about how retailers should work with banks to keep customer data safe.

  • LinkedIn  
  • Save this article
  • Print this page  

Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.

To access these options, along with all other subscription benefits, please contact [email protected] or view our subscription options here: http://subscriptions.risk.net/subscribe

You are currently unable to copy this content. Please contact [email protected] to find out more.

You need to sign in to use this feature. If you don’t have a Risk.net account, please register for a trial.

Sign in
You are currently on corporate access.

To use this feature you will need an individual account. If you have one already please sign in.

Sign in.

Alternatively you can request an individual account here: