News
Ernst and Young fails to disclose data loss, reveals The Register
Posted on February 25, 2006

Ernst and Young has lost a laptop containing data such as the social security numbers of its customers. One of the people affected by the data loss appears to be Sun Microsystems CEO Scott McNealy, who was notified that his social security number and personal information have been compromised.

While pushing all out transparency for its customers, Ernst and Young failed to cop to the security breach until contacted by The Register.

At lat week's RSA security conference, McNealy noted that he received an e-mail from an "anonymous partner" detailing a loss of his private data. "We determined that your name and social security number were among the data (lost)," the partner wrote to McNealy.

"This is an organization that we spend an enormous amount of money on to determine whether we are Sarbanes-Oxley compliant," McNealy said.

A spokesman at Sun confirmed that Ernst and Young is still the company's auditor but declined to out the firm that lost McNealy's data.

Ernst and Young declined to comment on whether or not McNealy was affected.

"We deeply regret that a laptop containing confidential client information was stolen, in what appears to be a random act, from the locked car of one of our employees," said Ernst and Young spokesman Charles Perkins. "The security and confidentiality of our client information is of critical importance to us. The computer was password-protected, and we have no reason to believe the data itself was targeted or that the information was accessed by anyone. We are notifying those clients whose information was contained on the computer."

Ernst and Young has littered its Web site with transparency advice for customers. The company, however, failed to make a public notification of the data loss.

Such secrecy seems quite rich given the current climate surrounding security and the protection of customer data. One might ask how a company such as Ernst and Young can judge the transparency of Sun or other customers.
SOURCE: The Register