It can happen to anyone

http://www.theregister.co.uk/2007/06/22/department_of_defense_email_hacked/

Not quite the same though is it.

No not quite the same thing - This was a multi million dollar organisation with some of the best security experts anywhere.

In reply to:

---

No not quite the same thing

---

You

The only difference between this and the PlusNet case is what the miscreant chose to do once he/she had compromised the systems.

The crux of Plusnet's issue is NOT the security breach. It can and does happen to anyone.

The crux is that Plusnet's breach revealed that they held plenty of data on their systems which simply should not have existed any more for any reason - it is this that is a problem, not the breach as long as they have dealt with it properly.

I'm inclined to agree with you - You'll get really clear visibility of our new data retention policy quite soon, and it's very obvious to me that we should have spent more time addressing this area over previous years. It is a real shame that it took what it did for us to get at all the nooks and crannies sorted out now rather than sooner... It's not so much that we ignored it though, more that we always seemed to have a bigger / more important issue to solve. Specifically with Webmail, we never actually finished the job of integrating it with our platform in a way that meant data was removed from the database when it was from other systems.

Ian

>You'll get really clear visibility of our new data retention policy quite soon.


Will this be before or after you answer the outstanding questions (the DPA ones included)?

In reply to:

---

You'll get really clear visibility of our new data retention policy quite soon

Would ZeN, IDNet and ntl:world answer that one if you asked?