[Dataloss] Follow up to Pfizer data loss / breach

[Henry Brown]

 From Newsday.com
Report: Pfizer waited weeks to notify employees of data breach

Pfizer Inc. let several weeks pass before informing 17,000 current and 
former employees that their personal information had been posted to the 
Internet, according to a letter from the company.

Connecticut Attorney General Richard Blumenthal released a copy of the 
letter Friday, telling The Day newspaper of New London that he will 
press Pfizer to explain the delay.

The data, which included Social Security numbers and some additional 
information, was discovered on April 18 when a computer consultant found 
sensitive information on a peer-to-peer network.

A Pfizer investigation determined the security breach had occurred about 
three weeks earlier when an employee's spouse used a company laptop 
computer to install unauthorized software and access a file-sharing 
network.
...
http://tinyurl.com/33habe