Hacked smartphone raises concerns
Hacked smartphone raises concerns

Paris Hilton hack highlights security failure

Service providers not doing enough to protect data, says Gartner

Written by Robert Jaques

The recent Paris Hilton incident, when hackers stole addresses and phone numbers from the celebrity's smartphone, highlights a wider failure to secure consumers' personal information, Gartner has warned.

Avivah Litan, vice president and research director at the analyst, said that the hack, which resulted in the contact details of stars including Anna Kournikova being posted onto multiple internet sites, shows that service providers and regulators, including those outside the banking and credit card industries, need to do more to safeguard sensitive customer data.

Advertisement

The warning comes after the security breach on 22 February, when a T-Mobile spokesperson confirmed that someone accessed and stole phone numbers, personal notes and photographs stored on Hilton's Sidekick II smartphone.

According to Gartner, the data was compromised in one of two ways: someone hacked into the server at T-Mobile where the data resided; or someone stole her password either offline or online through phishing or keystroke-logging malware.

"Whatever the method, this incident confirms Gartner's belief that service providers need to take an holistic view of combating fraud and break-ins. They must erect as many walls as possible, using a multi-channel, cross-silo system approach," said Litan.

In order to better safeguard customer information, service providers should encrypt data, implement strict systems that manage access to this data and extend data protection methods used for credit card account information to all sensitive information.

The analyst firm noted that data encryption, network segmentation and data access management processes are all requirements under the Visa and MasterCard payment card industry standard for companies that handle cardholder data, as T-Mobile does.

Gartner also believes that regulators should impose penalties and fines on service providers that do not safeguard sensitive customer data.

"While there are some basic steps that consumers can take to protect their data, such as not sharing passwords, customers should not be held accountable for breaches and hacks beyond their control," said Litan. "The guardians of the data have to take steps to protect consumers and other customers."

Tags:

Related articles

Related whitepapers

Related jobs

Do you agree?

Most commented stories

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation