[Dataloss] Olympic Funding Chicago?

blitz blitz at strikenet.kicks-ass.net
Fri Mar 3 23:32:14 EST 2006


Well Adam, I'm basing the premise of "an inside job" on both the 
specificity of the target: the drives, which can be used on ANY 
similar computer, and can be easily concealed, (an employee walking 
out could easily conceal them, and not attract much attention) plus 
the type of information contained therein.
It would be just as easy to use a server somewhere else in a secure 
environ, than to store them locally as happened here. A person would 
need to know they were on site.
It's difficult to imagine someone risking a commercial burglary 
charge, and data theft charges for hard drives worth at most a few 
hundred dollars. The information would be worth more in the right 
hands, and to know that information was where it was, one could 
easily make the connection either the burglar worked there, or 
someone who did, tipped someone else to the value of the drive's 
information. Even if it wasn't data theft, but a desire to cripple 
the operations of the company, cause panic, loose customer faith, 
etc. a former employee, or a competitor who knew it was there would, 
IMHO, qualify as an "insider".
Now, couple all that, with the claim of "taking extra ordinary" 
measures to secure that data, including the $2800 "security" 
software, and the alarm system which mysteriously was left off that 
weekend, and I believe we have someone with the key to the 
encryption, and the knowledge or ability to foil the alarm. The whole 
thing was just too smooth IMHO. Also missing is whether the company 
was insured for the theft. (Disruption of business insurance etc,)

If I were a detective, this is the route I'd be taking most certainly.



At 08:04 3/3/2006, you wrote:
>While I'm tempted to agree, I don't think there's nearly enough
>information in the single media report to say "This has the smell of
>an inside job ALL OVER it."
>
>On Fri, Mar 03, 2006 at 04:28:08AM -0500, blitz wrote:
>| Hard drives alone like that would make one think it was a well planned job.
>| Someone wanted that specific information, and its a LOT easier to 
>put a couple
>| hard drives in your pocket than take the whole computer. Whole bunches less
>| conspicious.
>| Whoever did this had a specific target and knew what they wanted...do doubt
>| about it.
>| With hard drives approaching the price of breakfast cereal, no one but a
>| determined, focused thief would take the trouble to dismount them.
>| This has the smell of an inside job ALL OVER it.
>|
>|
>|
>| At 18:38 3/2/2006, you wrote:
>|
>|     Does anyone know anything? there's not quite enough here for 
>my stereotyped
>|     blog headline...
>|
>|     http://www.pioneerlocal.com/cgi-bin/ppo-story/localnews/current/eb/
>|     03-02-06-846416.html
>|
>|     > George Gilou arrived at his mortgage office Feb. 6 and discovered
>|     > the back door had been forced open. It didn't take long before he
>|     > realized the business he owns, Olympic Funding Chicago, 6308
>|     > N. Milwaukee Ave., had been burglarized.
>|     >
>|     > According to police reports, three computer hard drives were stolen,
>|     > containing clients names, social security numbers, addresses and
>|     > phone numbers.
>|
>|     In particular, was this actually just the hard drives being stolen?
>|     How many people were affected?
>|
>|     Adam
>|
>|
>|     _______________________________________________
>|     Dataloss Mailing List (dataloss at attrition.org)
>|     http://attrition.org/errata/dataloss/
>|
>|
>|     --
>|     This message has been scanned for viruses and
>|     dangerous content by MailScanner, and is
>|     believed to be clean.
>|
>|
>| --
>| This message has been scanned for viruses and
>| dangerous content by MailScanner, and is
>| believed to be clean.
>| --
>| This message has been scanned for viruses and
>| dangerous content by MailScanner, and is
>| believed to be clean.
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://attrition.org/pipermail/dataloss/attachments/20060303/125aad65/attachment.html 


More information about the Dataloss mailing list