full-disclosure - [FD] Iron Mountain doesn't take physical security seriously

Open Source and information security mailing list archives

Message-ID: <b72a6b2a5af75c6a1ffa3bc6c66b0e50@cock.li>
Date: Mon, 30 Jun 2014 15:41:35 -0400
From: freddielarge@...k.li
To: fulldisclosure@...lists.org
Subject: [FD] Iron Mountain doesn't take physical security seriously

Went down into my office's lobby today and saw a few dozen boxes of 
confidential papers belonging to another company sitting there unguarded 
and not secured. The Iron Mountain guys were out front, but weren't 
keeping an eye on the boxes at all. I was able to open the boxes and 
snap a few pictures of the file labels for evidence. There were old 
employee records, I-9s, all sorts of very confidential stuff just 
sitting there in the lobby. Came back an hour or so later from lunch and 
some of the boxes were still there with nobody watching them.

http://i.imgur.com/YvZKBb6.jpg

http://i.imgur.com/9bTDrRE.jpg

Very disturbing to see this kind of mistake in a well-known security 
company.

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives