Communauto Employee Suspected of Stealing Customers’ Personal Data
Canadian car-sharing company Communauto has warned customers about a potential personal data breach involving one of its employees.
According to Communauto, the employee allegedly deployed an unauthorized script during the night of September 3-4 to view and download subscriber files. The company detected the activity, blocked the employee’s access and notified the police. An investigation involving the employee and their computer equipment was launched the following day.
The potentially affected information includes:
- Customers’ names and dates of birth
- Home addresses and phone numbers
- Driver’s licence information
- Emergency contact details
- Images or PDFs of driver’s licences
- Documents submitted during registration
- Photos used for identity verification
Communauto estimates that approximately 2% of its users may have been affected. The company said that payment information and account passwords were not accessible to the employee and were therefore not involved in the incident.
Communauto says the investigation is ongoing. The employee’s responsibility has not been established by a court.
DLP and DCAP solutions can help reduce this risk by monitoring access to sensitive information, detecting unusual file activity and controlling attempts to copy or transfer personal data. User activity monitoring can also help identify suspicious behavior and detect policy violations at an early stage, providing security teams with greater visibility into potential insider threats. With SearchInform, organizations can combine data protection and user activity monitoring to detect potentially malicious actions and respond to violations before they result in large-scale data loss.
ABOUT SEARCHINFORM
SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, Information Security outsourcing service.
