New York hospital loses data on 130,000 via FedEx - and how to send cd's safely

A few weeks ago FEDEX mislaid CD's containing 130,000 people's patient data - Gotcha? the data wasn't encrypted. The disks disappeared from a weekly shipment from Siemens to the Lincoln hospital in New York via FedEx. Data included social security numbers, address and even driving licence information, as well as medical records.

 

It's interesting, and probably very common, that everyone sending the data thought it was ok not to encrypt such sensitive records, presumably as couriers are seen as such a great and safe way to send things.

 

If you're sending sensitive files, before you burn them to disk, encrypt with tools like truecrypt or WinZip. If you do it properly, and your data is lost or stolen, no-one can read it.

 

If you're using WinZip, the key thing is to use the latest version with AES 256 encryption, and to protect against password crackers by using a horrific password, following these guidelines from Dave Whitelegg:

1. At least 12 characters in length
2. Be random not contain any dictionary, common words or names
3. At least one Upper Case Character
4. Have at least one Lower Case Character
5. Have at least one Numeric Character
6. Have at least one Special Character e.g. $,£,*,%,&,! 

 

Or just send the data securely online!

 

Links:

The story http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?newsid=20908

 

Great article on how to choose passwords and encrypt files using winzip -  http://blog.itsecurityexpert.co.uk/2008/01/winzip-encryption-password-security.html 

safedrop - new look and feel, better simplicity, better security

We've just upgraded the web interface. It's prettier, simpler, easier to use, and we hope reflects the simplicity of our service.

As a bonus, you can now send to multiple recipients through the web.  Just cut & paste lots of emails into the recipients field.

We've also protected your message history with email tokens, adding an extra level of security. So even if someone compromised your password, they would need your email as well to see the details any messages that are still live.

Did we do good job? We want to be the best secure messaging on the planet - let us know if we can do anything better.

The benefits of home working - save cash, carbon and time

According to Telework Research Network's businesses that let 150 employees work from home half the time will save nearly £1m. Most of that is improved productivity and less sick time, but 30% of the saving is cold hard cash, electricity, office space, maintenance etc. The employee’s save ..

Click to read more ...

6 steps to creating an extraordinary brand (stolen from the beer barons)

We're updating the interface and website for safedrop and this is a really helpful quote that's stuck on the wall in my office. 

1. Tell a compelling story based on an undeniable brand truth
2. Live by and refuse to compromise on your principles
3. Have an instantly recognisable iconic look
4. Deliver a unique relevant consistent experience
5. Inspire people to become loyal brand champions,
6. Deliver enduring extraordinary profits

From Lord Bilimoria (Cobra beer) who in turn got it from Molsen Coors' definition of what makes for an extraordinary brand.

I think these are great pointers, it's certainly a challenge to meet them all.

Would you add anything to the list? Any pointers for developing a great brand? 

Thanks to mechanical mole  http://bit.ly/9SU3b5 

New safedrop brochure

Just finished our latest brochure. Cut it all down to fit on one page (you are double sided printing now aren't you!)

 download here

Slight tweak to safedrop email format

We've tweaked the format a little, now the link appears above the users message. It's cleaner, and people certainly aren't going to miss the bright orange click here box!

Data protection act - avoid £500k fines and enhance security with safedrop

The governing body behind the Data Protection Act, the ICO, was recently granted the power to fine organisations up to £500,000 if they don't meet the guidelines. Here's a quick look at the 8 fundamental principles of the Data Protection Act 1998. The underlined points show where safedrop helps. If you're using a typical US based file sharing service, you're probably contravening points 7 & 8.

Click to read more ...