Bank emails confidential info to wrong address, sues Google
Filed under: Banks, Technology
As a people, we rely on Google for a lot. We count on the company to deliver information, email and more; but did you know you can now go after Google for your mistakes? That's exactly what one bank is doing after a teller accidentally emailed a document containing information on 1,300 accounts to the wrong address! To top it all off, the bank still hasn't notified its customers about the data loss.
The Rocky Mountain Bank in Wyoming is suing Google to find out who owns a Gmail account that a teller mistakenly sent a document containing, "names, addresses, tax identification or Social Security numbers and loan information." After finding the error Rocky Mountain Bank sent an email telling the owner of the Gmail account to delete the sensitive information and followed up further asking the Gmail account holder to contact the bank to discuss the issue.
When Rocky Mountain Bank failed to get a reply they asked Google if the account was active but were told they could only get that with a court order. Rocky Mountain Bank followed up with a suit against Google seeking the account information as well as asking for the proceedings to be sealed.
When reached for comment a Google Spokesperson was quoted as saying that, "the court has required it [RMB] to resubmit its papers. Once we have a chance to review these papers, we will determine our response."
The bank's decision to not notify the 1,325 affected individuals and businesses about the data breach is extremely troubling since Rocky Mountain Bank has absolutely no clue who has their customer's information. Yes. It is possible that the information is safe, since a smart user would quickly delete an unexpected email with an attachment and ignore the follow-up emails asking for more information as phishing attempts, but it doesn't justify the secrecy.
In any case, the bank should have had some kind of security policy in place to prevent the sending of such a confidential file. On top of that why did a teller's computer have a file with 1,300 accounts and information in it? Don't they know that's what password protected, encrypted databases are for?
Once you get past the lapses in bank security and the bank's inability to accept its own mistake, the fact remains that you need to triple check email addresses when you send something important; especially if it contains personal information.
Having a common Gmail address myself, I've received my fair share of personal information including; the location of many spare keys (look under the rock), vacation itineraries, hotel and car rental confirmations, baby pictures, pictures which I want to unsee but cannot, college transcripts and any other number of semiprivate information all from mistyping an email addresses.



Reader Comments (Page 1 of 1)
9-23-2009 @ 9:45PM
Angelineza said...
Wow! It's amazing the brain cell compacity of some of the folk here. Here is an interesting, and very business-like and a quite complicated version of how Google is being sued. It's kind of like a real geek should be answering this question! Seriously, though. It's amazing what members will leave messages about the most! Oh gosh, anything to do with celebs, fashion, music, youtube, etc.
Reply
9-24-2009 @ 8:17AM
Peg said...
I agree. The obvious lack of interest displayed by this particular message board is staggering. The most shocking is a zero response from anyone who uses the Rocky Mtn. Bank and until this story posted, was completely unaware their personal info was so carelessly mishandled. Apparently people are just too busy commenting on more important issues such as Rihanna's new dye-job and Venus' plan to hawk feminine products. It's no wonder the US is circling the bowl.
9-24-2009 @ 8:30AM
Dee said...
ok...............the bank screws up and decides to sue google. Why would a teller have access to confidential information? Shouldn't that be something a manager should handle? What's wrong with this picture? The bank also doesn't bother to let it's customers know it messed up?
I see a lawsuit, but I don't think google should be the one being sued .
Reply
9-24-2009 @ 3:08PM
Val said...
Was thinking the same thing myself Dee. A teller has access to sensitive or confidential information? Gee - they must have lowered the clearance levels. Makes me feel very confident about banks these days.
9-24-2009 @ 11:17AM
Michael said...
Google did nothing wrong. The bank is wrong. Period.
Reply
9-24-2009 @ 11:17AM
laughing@bank said...
is there some kind of fee that goes with this ? lol or is it a added bonus for the customers
Reply
9-24-2009 @ 11:17AM
Bill West said...
Google did nothing wrong, the bank made the error, and Google is following correct procedure...2 wrongs STILL do not make a right....let the bank sue..it will be a party!
Reply