Headquarters
Fortressware, Inc.
2672 Bayshore Pkwy
Mountain View
CA 94043
T: +1.650.472.3886
F: +1.650.472.3966
|
Security News
2009-07-07
Goldman May Lose Millions From Ex-Worker’s Code Theft
March 29, 2009 (San Francisco Chronicle) -- July 7, 2009 (Bloomberg) -- Goldman Sachs Group Inc. may lose its investment in a proprietary trading code and millions of dollars from increased competition if software allegedly stolen by a former employee gets into the wrong hands, a prosecutor said.
The proprietary code lets the firm do “sophisticated, high-speed and high-volume trades on various stock and commodities markets,” prosecutors said in court papers. The trades generate “many millions of dollars” each year. “The bank has raised the possibility that there is a danger that somebody who knew how to use this program could use it to manipulate markets in unfair ways,” Facciponti said, according to a recording of the hearing made public yesterday. “The copy in Germany is still out there, and we at this time do not know who else has access to it.”
 Fortressware Solution
 Fortressware Solution
Many security solutions require complete compliance on the part of every employee in order to work. This strict requirement makes it difficult for employees to be productive; so many employees will find ways to get around it. Fortressware believes that management should have a more flexible and refined level of control over who can access information as well as their rights to copy, upload, print or forward depending on the sensitivity of the information. If Goldman Sachs Group Inc. had implemented Fortressware’s solution, there would be no danger of their entire software algorithm falling into the wrong hands. With Fortressware, their employees would have been able to work at home or anywhere they’d like without interruption, while software created or modified would remain private and protected at all times.
2009-03-29
San Quentin loses data on 3,500 visitors
March 29, 2009 (San Francisco Chronicle) -- A flash memory drive containing names, birth dates and driver's license numbers of more than 3,500 people who either volunteered or visited San Quentin State Prison in a group tour has been lost, a prison official said Friday. The flash drive was used to move the data each evening from the prison's administrative office near the parking lot to computers at the two entrance gates to the facility to allow guards to identify volunteers or groups, such as college students, that tour the prison, said Samuel Robinson, a San Quentin spokesman.
 Fortressware Solution
 Fortressware Solution
Lost USB flash drives are becoming more and more commonplace. In an instant, thousands of people’s personal information was compromised. Sadly, it seems that this is not an isolated incident. Thankfully, Personal Fortress for USB can stop these problems dead in their tracks. Imagine the headlines if this prison used Personal Fortress for USB: San Quentin loses protected USB drive but prevents any information leak with high-level software. Although encrypted USB drives are not rare, Personal Fortress has a unique advantage: anti-propagation technology, which makes sure that even legitimate users cannot accidentally or intentionally leak any of the data. Get Personal Fortress today and make sure you can prevent negative headlines like this!
2008-12-03
588 Kleiner Perkins iFund Applications Accidentally Published To Web
December 3, 2008 (TechCrunch Report) -- Kleiner Perkins’s iFund is a $100 million fund to invest in startups building applications for the iPhone.Startups that wish to apply for funding can fill out an online application here. That information, which includes contact information, founder bios, the business plan, demos, financial information, etc. is then dumped into a database for review.That data was accidentally published on the web by Kleiner Perkins?former hosting provider, Meteora Technologies Group
 Fortressware Solution
 Fortressware Solution
Here's a case of a text file generated from the contents of a database, and placed on a file server, where it was exposed to the Web. Unfortunately, it contained proprietary information from close to 600 companies applying for funding from a venture capital firm. Accidental leaks such as this one happen frequently, especially these days as businesses try to do more with fewer resources. And accidental leaks resulting from someone simply trying to do their job are no less damaging than any other. The damages in this case could be huge as the applicant companies lose control over their confidential information and perhaps fail to qualify for capital. As a result, some of them may file lawsuits seeking compensation for the impact to their businesses. This is a case of an exposed database that could have been protected by Fortressware's Workgroup Fortress. Fortressware not only ensures data is encrypted when transmitted between a client machine and the database server, it also encrypts the data when it's stored in the database AND when it's being viewed or modified.
Furthermore, Fortressware's anti-propagation controls disallow anyone who is not in the controlled virtual workspace from accessing the decrypted data. Therefore, even if someone accidentally acquires the database or the data, e.g. the cached data in this case, the information is unreadable because it stays encrypted. In contrast to other leak prevention products, Fortressware protects both the data and files, dynamically.
2008-11-08
Litigation Hits GS-Caltex
November 7, 2008 (Korea Times) -- An oil refiner, GS-Caltex, has admitted that two CD's found in the trash contained 11 million records from its customer database. In response, several class action lawsuits have been filed against the company by consumers. Three employees of the GS-Caltex marketing subsidiary admitted that they downloaded the information to sell on the black market.
 Fortressware Solution
 Fortressware Solution
The experience of GS-Caltex illustrates the extent to which a large company can be damaged seriously by security weaknesses in one of its subsidiaries. And the damage faced by GS-Caltex is one that an increasing number of businesses will face: those directly impacted by information leaks - in this case consumers - will file lawsuits seeking compensation for their loss. This means that in addition to the internal costs incurred to plug leaks and deal with their aftermath, pay fines and other regulatory costs, and re-establish the trust of customers, firms must now deal with expensive litigation. When stacked alongside these substantial costs, the investment in a Fortressware secure solution pales in comparison. Had just such a solution been in place at GS-Caltex, employees in the marketing organization would have had the access they needed to customer information. But they would not have been able to copy it from the database to any portable device or media, including CDs. In contrast to other leak prevention products, Fortressware protects both files and data.
2008-09-08
Misdirected Layoffs E-Mail Puts Carat on Defensive
September 8, 2008 (Adweek) -- NEW YORK Aegis Group's Carat issued a memo to its entire U.S. organization last week apologizing for the way employees found out that rumored layoffs were being implemented.
The apology memo was part of the media shop's effort at damage control after an embarrassing e-mail snafu last Wednesday. The e-mail, outlining procedures for implementing planned layoffs and informing staff and clients about them, was intended for senior management only but was accidentally distributed companywide.
 Fortressware Solution
 Fortressware Solution
Who among us has not come close - or worse - to sending an email by mistake? In this case, a human resources executive accidentally sent an email throughout the company describing a planned layoff in Word and PowerPoint attachments. The unencrypted documents were quickly posted to the Web, available to both clients and competitors. Mistakes like these will always happen, but the damage can be prevented. Fortressware secures all confidential files within an encrypted Fortress capsule, which can be distributed as an email attachment. Even if the "wrong" individual should receive the email, the files remain invisible and inaccessible to all but authorized recipients. Fortressware products continuously protect the data, no matter where or how it is distibuted.
2008-07-09
File-sharing breach at investment firm highlights dangers of P2P networks -- again
July 9, 2008 (Computerworld) -- Wagner Resource Corp. recently learned the hard way what Pfizer Inc. and many other companies have similarly discovered in the past: installing peer-to-peer file-sharing software on corporate computers is a bad idea.
 Fortressware Solution
 Fortressware Solution
The article presents a very good description of the growing impact of P2P leaks. Unfortunately, it concludes on a weak note. In acknowledging the difficulty of preventing employees from downloading the software, it shifts the burden to business, recommending a reactive rather than proactive solution: firms should monitor and filter sensitive data leaking in and out of their networks. In other words, try to stop the data when it's already well on its way to being compromised.
Fortressware takes a different approach. All sensitive data on an employee's computer is secure all of the time through both encryption and the company's unique anti-propagation technology. This means that files are protected against an employee's actions, such as making a copy to a USB drive, AND protected against the actions of software programs, including applications that distribute files across the Internet.
2008-05-01
6,000 UCSF patients' data got put online
May 1, 2008 ( San Francisco Chronicle) -- Information on thousands of UCSF patients was accessible on the Internet for more than three months last year, a possible violation of federal privacy regulations that might have exposed the patients to medical identity theft, The Chronicle has learned.
 Fortressware Solution
 Fortressware Solution
A healthcare organization had shared information on its patients with a vendor to assist in its fundraising efforts. But somehow at least a portion of the data was published on the Internet. This highlights the practice of firms engaging service providers to provide sales, marketing, and other support. In the process, millions of electronic records may be transferred, controlled only by a contractual commitment that the data will be protected. Frequently, no substantive enforcement mechanism is included. Fortressware enforces a firm\s data security policies, even if its data moves outside its firewall to a third party. It ensures that patient information is kept encrypted in a secure space and can\to be copied or moved outside this space. Additionally, through Fortressware\s data masking capabilities, 3rd parties are able to mine patient data for the information they are authorized to use, but all other data remains hidden and inaccessible.
2008-04-24
Missing laptop raises fear of identity theft
NORTH BEND - The theft of a laptop computer owned by a local accounting firm has made nearly 500 employees of Coos County and private organizations concerned about identity theft. "During the night of Tuesday, March 4, 2008, a notebook computer was stolen from a locked vehicle. The notebook's hard drive may have contained your name, Social Security number, and other personal information," the letter stated. "We have notified law enforcement about this incident. This notification included a general report alerting them to the fact that the incident occurred. However, we have not notified them about the presence of your specific information in the data breach."
 Fortressware Solution
 Fortressware Solution
y protected from the point it is created to when it is used. This includes portable devices, including laptop computers. In this case, the thief would not be able to see, let alone access, the personal information on the laptop. Regardless of which applications create or utilize sensitive information, Fortressware always stores the data on disk encrypted. Additionally, the story points out that old audit information was on the lost machines. Through Fortressware, access to encrypted data can be further limited by setting an expiration date, after which no one, not even previously authorized users, have access to it. Financial dated March 27 didn't arrive in his mailbox until Monday.
2008-01-29
New data security breaches come in fours
January 29, 2008 (Computerworld) -- What do Fallon Community Health Plan, Pennsylvania State University, OmniAmerican Bank and T. Rowe Price Group Inc. all have in common? Each of them recently joined the seemingly never-ending parade of organizations that have disclosed security breaches resulting in the potential compromise of personal data.
 Fortressware Solution
 Fortressware Solution
Companies develop a web of relationships with suppliers, partners, consultants, and service providers. In the process, these businesses are entrusted with personal client information, including individual financial and health data. Unfortunately, the task of securely managing this information frequently is ill defined or unenforced. Fortressware provides a complete solution by:
- Securing sensitive content as it is flows to and from 3rd parties
- Keeping content encrypted and enforcing access policies on 3rd party desktops and laptops
- Keeping a log of any attempts to leak content inside or outside of a 3rd party's facilities
- Terminating all access by 3rd party users automatically at the expiration of a project's completion date
2007-12-18
Businesses Devise Ways to Guard, Manage Laptops That Have Left the Office
When consulting firm Booz Allen Hamilton Inc. started giving laptops to most of its 20,000 employees three years ago, the company found itself facing the challenge of teaching its computer network "to find Fred," said Booz Allen's chief information officer, Fred Smith. "I had no idea where and what my network's endpoints are," the chief information officer said."So I needed to do things a lot differently."
 Fortressware Solution
 Fortressware Solution
Fortressware's workgroup solution is designed for securing sensitive information in such a dynamically distributed environment. It:
- Provides a secure, virtual workspace that secures files and information across public networks, geographically-distributed teams,especially for managing mobile workers
- Protects data at its point-of-creation and keeps it secure all the way to its point-of-use, eliminating the need for monitoring data in motion
The underlying patent pending technology addresses the new global environment where "networks are without boundaries".
2007-11-24
Security probe focuses on patients' data
ST. JOHNS , Newfoundland , Nov. 24 (UPI) -- Police in Newfoundland are investigating the possible theft of hospital patients' personal data during a computer security breach.
 Fortressware Solution
 Fortressware Solution
Fortressware actively incorporates offline and remote users securely. In this story, though the details of how the information leaked are unclear, it seems apparent that the patient data was not encrypted. And it may well have leaked over a peer-to-peer connection. Fortressware keeps all project data encrypted and blocks its unauthorized transmission.
2007-11-23
McLaren believe Renault gained unfair advantage, by Alan Baldwin
LONDON , Nov 23 (Reuters) - McLaren believe Formula One rivals Renault gained a "clear benefit and unfair advantage" from technical information taken to them by a former employee, according to a memo leaked to the media on Friday.
 Fortressware Solution
 Fortressware Solution
In Fortressware, McLarren manager could have defined a secure project workspace for each of their employees who needs to work on sensitive projects. These users can access all information they need to work inside the secure workspace but cannot copy decrypted information to network locations, local storage devices, or attach to a mail message. Additionally, there is full audit trail for all the acitivities conducted in the secure workspace.
2007-11-20
U.K. agency loses sensitive data on 25m people
The head of HM Revenue & Customs, the United Kingdom's tax agency, resigned on Tuesday, taking responsibility for a massive data leak that potentially put the sensitive personal details of 25 million people at risk.
 Fortressware Solution
 Fortressware Solution
In Fortressware, managers define a security policy that defines who has access to sensitive information and what they may do with it. In this case, a Fortressware policy could have:
- Done away with entrusting these records to physical media - all files could have been placed inside an encrypted Fortressware capsule when transferred electronically and stay encrypted when stored locally.
- Restricted the ability to copy unencrypted files to a CD
- Provide different levels of visibility to the encrypted record for users of different resposbilities
|

Download Personal
Fortress Beta
Security Breaches
- Can This Happen
To You?
|