Previous HR was well beyond retirement age essentially working to have something to do and one day emailed all of management a spreadsheet asking us to verify our information. That sheet contained each of our full names, addresses, phone numbers, birth dates, social security number, etc.
To my knowledge nothing of significance happened. I have my credit frozen.
I worked for a company that handled a ton of personal data. Pretty much every person in Germany, including addresses, bank account details, etc.
On my first day there (fresh from university) I was given literally full read access to the entire database. And as I later found out by accident: they did not track any data exfiltration at all. I copied several gigabytes of data without anyone noticing.
Your data is only as secure as the least motivated data broker sees fit. And that’s not very fit.
A few years ago I asked a customer for a list of employees, so I could verify who could purchase on their account. They replied with their personnel files. Luckily it didn’t have social security numbers, but it had a LOT of personal information. Medical records, drug test results, stuff like that.
Previous HR was well beyond retirement age essentially working to have something to do and one day emailed all of management a spreadsheet asking us to verify our information. That sheet contained each of our full names, addresses, phone numbers, birth dates, social security number, etc.
To my knowledge nothing of significance happened. I have my credit frozen.
I worked for a company that handled a ton of personal data. Pretty much every person in Germany, including addresses, bank account details, etc.
On my first day there (fresh from university) I was given literally full read access to the entire database. And as I later found out by accident: they did not track any data exfiltration at all. I copied several gigabytes of data without anyone noticing.
Your data is only as secure as the least motivated data broker sees fit. And that’s not very fit.
A few years ago I asked a customer for a list of employees, so I could verify who could purchase on their account. They replied with their personnel files. Luckily it didn’t have social security numbers, but it had a LOT of personal information. Medical records, drug test results, stuff like that.