01 Oct 2007
Clothing giant Gap has admitted that a notebook containing unencrypted details of around 800,000 job applicants has been stolen from one its vendors.
Applicants who registered for positions at Gap or any of its Old Navy or Banana Republic stores in the US, Puerto Rico and Canada between July 2006 and June 2007 have now potentially had their personal information exposed.
The data could include Social Security numbers and employment history.
Gap has said that it is offering free credit monitoring services and fraud resolution assistance for the next year to all those affected.
"We are reviewing the facts and circumstances that led to this incident, and will take appropriate steps to help prevent something like this happening again, " said chief executive Glenn Murphy.
Gap claimed that not all applicants are affected as the company uses more than one vendor to manage its job applicant data, and that Canadian applicants' Social Insurance numbers were not among the details stolen.
Calum Macleod, European director at security firm Cyber-Ark, argued that the data should have been encrypted.
"It clearly wasn't, so now the Social Security numbers, employment records and a wealth of other information on 800,000 people who applied for jobs at Gap, Old Navy, Banana Republic and Outlet stores across the US, are potentially available to identity thieves," he said.
Latest stories from Security
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Start-up company in West London are looking for a number...
This team is responsible for developing and running carrier...
Graduate Mathematical Modelling position focused on research...
Working on real projects and real high performance software...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Why can't these business learn from others?
To me it simple logic not to put such information on a laptop or allow anyone to take the laptop from a secure area to be accessible to be taken.
Posted by: Dawn I. 25 Oct 2007
Irresponsible
Why would that data be on a laptop in the first place?
Posted by: Gary D 08 Oct 2007