lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 30 Jun 2014 15:41:35 -0400
From: freddielarge@...k.li
To: fulldisclosure@...lists.org
Subject: [FD] Iron Mountain doesn't take physical security seriously

Went down into my office's lobby today and saw a few dozen boxes of 
confidential papers belonging to another company sitting there unguarded 
and not secured. The Iron Mountain guys were out front, but weren't 
keeping an eye on the boxes at all. I was able to open the boxes and 
snap a few pictures of the file labels for evidence. There were old 
employee records, I-9s, all sorts of very confidential stuff just 
sitting there in the lobby. Came back an hour or so later from lunch and 
some of the boxes were still there with nobody watching them.

http://i.imgur.com/YvZKBb6.jpg

http://i.imgur.com/9bTDrRE.jpg

Very disturbing to see this kind of mistake in a well-known security 
company.

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists