Posted in: In this week's e-newsletter, Security
Are employees unknowingly making your company’s data available on the Internet?
That’s what about 100 businesses recently learned was happening, via a warning letter from the Federal Trade Commission (FTC).
The FTC notified the businesses it had discovered sensitive data about their workers and customers on peer-to-peer (P2P) filesharing networks, where it could be downloaded and used to commit identity theft or fraud.
The likely cause of the leaks: Employees downloaded P2P clients at work to download music and video files, without realizing the programs were configured to share everything on the person’s hard drive with outside users.
The FTC’s letters make it clear: Companies with sensitive info exposed may have broken the law — and blaming users for their behavior won’t shield companies from liability.
Said the FTC: “It is your responsibility to protect such information from unauthorized access, including taking steps to control the use of P2P software on your own networks and those of your service providers.”
Companies should take steps now to make sure users aren’t exposing data:
- Write a policy against installing P2P clients on company computers
- Monitor your network to detect unauthorized programs, and
- Use firewalls to block outsiders from accessing the network.