Navigate to next or previous posts:

« Best Comment in a Long Time | Emergent Chaos Main page | Blogging @ Work: Blue Hat and Threat Modeling »

Connecticut Sues Accenture over Ohio Breach

(Posted by adam)
As reported in the Scott and Scott Business and Technology law blog:
Connecticut hired Accenture to develop network systems that would allow it to consolidate payroll, accounting, personnel and other functions. Information related to Connecticut’s employees was contained on a data tape stolen from the car of an Accenture intern working on an unrelated, though similar project for the State of Ohio. (The tape also contained personal information on about 1.3 million Ohio residents.) The intern apparently had been using the Connecticut program as a template for the Ohio project.

(Christopher Barnett, "Accenture Sued for Negligence by the State of Connecticut")

Some quick takeaway lessons:
  1. Build new projects with new data
  2. Outsourcers are likely to cut corners in ways they don't think you'll catch
  3. Supervise your interns

Posted by adam on October 2, 2007 at 11:34 AM in breach analysis . You can: comment, view comments (1), see trackbacks (0) or search Technorati.

Bookmark this post:

Comments

4. Require that all intellectual property produced under the contract will be owned outright by you, not the consulting firm, and that any breach of this provision will produce irreparable harm.

Posted by: Not a Lawyer | October 2, 2007 6:59 PM