AFP: SEC may have destroyed crucial probe data: senator

A US senator said Wednesday that the Securities and Exchange Commission may have destroyed thousands of documents related to probes into possible violations by major banks and hedge funds.

Senior Republican Senator Chuck Grassley said that “an agency whistle-blower” sent him a letter that described the SEC’s allegedly unlawful destruction of records related to more than 9,000 informal investigations.

The documents included cases arising from the 2008-2009 financial crisis, including Goldman Sachs, AIG, and the Bernard Madoff pyramid fund, according to the whistle-blower, Grassley said.

The whistle-blower, 13-year SEC lawyer Darcy Flynn, said the destroyed records related to “matters under inquiry” or MUIs — probes that precede the launch of formal investigations.

“From what I’ve seen, it looks as if the SEC might have sanctioned some level of case-related document destruction,” Grassley said in a statement.

“It doesn’t make sense that an agency responsible for investigations would want to get rid of potential evidence.”

via AFP: SEC may have destroyed crucial probe data: senator.

Lost Data? Create An Emergency Response Plan | napset.com

Chances are this may have happened to you: A letter or e-mail arrives from a company with which you do business, informing you that their customer data files were “accessed by a third party.”

These messages generally include reassuring statements that they take your privacy very seriously, that steps have been taken to improve data security and you have no need to worry. Sometimes, they even apologize for the inconvenience.

What should you do next? Here are a few suggestions:

• Be Cautious: The company that lost your personally identifiable information may tell you they believe your important information is secure because it was encrypted, kept on a different server or not saved after your last transaction. This may be accurate but you should take necessary precautions.

• Change Your Password: Start with the online site that was compromised. If you use the same username and/or password to access other sites, change those passwords too.

• Use Strong Passwords/ Passphrases: Your phone number or pet’s name is too easy to guess. Skilled hackers can break most passwords in a matter of seconds. Use a random password generator, which lets you choose password length, case sensitivity and whether to use special characters. Then store them with a password manager or in a secure place of your own. Consider using a pass “phrase” instead of a password.

via PROTECTING YOUR ASSETS.

BP denied access to White House emails in oil spill litigation | Louisiana Record

U.S. Magistrate Judge Sally Shushan has denied a request by BP attorneys to obtain emails sent by a former adviser to President Barack Obama during the 2010 Gulf of Mexico oil spill.

A letter sent by BP attorney Robert Gasaway on July 7 asked Shushan for permission to obtain emails sent by Carol Browner, a former Presidential adviser on energy and climate.

“There appears to be material [White House] involvement in the government’s response to the oil spill and spill volume estimation process,” the letter states.

On July 15, BP filed a formal motion for discovery seeking the emails sent by Browner.

Shushan ruled July 20 that “BP has not made a sufficient demonstration of the need for the documents.”

via BP denied access to White House emails in oil spill litigation | Louisiana Record.

SEC sues Florida man over bids for all AMR, Kodak shares | Dallas-Fort Worth Airlines News – Business News for Dallas, Texas – The Dallas Morning News

The Securities and Exchange Commission is suing a Florida man who offered to buy all the stock in Eastman Kodak Co. and AMR Corp., parent of American Airlines Inc., in March.

In the suit filed Tuesday in a federal district court in Florida, the SEC alleges that Allen Weintraub and his Sterling Global Holdings “have substantially no assets” and “lack the means to complete the tender offers.”

Weintraub did not respond to an email and a telephone call Wednesday seeking comment.

Ed Martelle, spokesman for Fort Worth-based AMR, said, “We believe the SEC’s action speaks for itself.”

The civil lawsuit refers to Weintraub as “a convicted felon on probation for fraud in the state of Florida” and says he has been previously enjoined “against violations of the anti-fraud provisions of the federal securities laws.” A federal court order bars him from acting as an officer or director of a public company.

It also noted that Weintraub “filed for personal bankruptcy in April 2007” and has not paid the SEC a $1.05 million judgment from a previous lawsuit.

In the AMR case, Weintraub sent a letter March 29 to “Gerald Arpey” offering $9.75 per share of AMR stock, an offer worth about $3.25 billion. Gerard Arpey is chairman, president and chief executive of AMR.

That followed Weintraub’s March 19 offer for all shares of Kodak for about $1.3 billion.

AMR officials had brushed off the offer and referred the letter to SEC officials.

via SEC sues Florida man over bids for all AMR, Kodak shares | Dallas-Fort Worth Airlines News – Business News for Dallas, Texas – The Dallas Morning News.

The Thin Line Between Electronic Discovery and Hacking | Catalyst E-Discovery Blog

Is it ever appropriate to tap into someone else’s computer network in order to preserve documents for litigation?

An interesting decision from the 3rd U.S. Circuit Court of Appeals addresses this question, deciding whether a plaintiff’s attempt to preserve digital documents during litigation was appropriate under federal discovery rules or unlawful under state and federal computer anti-hacking statutes. In the Dec. 13 opinion, Joseph Oat Holdings, Inc. v. RCM Digesters, Inc., the court introduces the issue this way:

“This appeal involves an overlap between substantive claims under state and federal anti-hacking laws and alleged electronic discovery misconduct.”

The facts are somewhat involved, but I’ll give you the bullet-point version of what happened, as recounted in the court’s opinion:

In February 2005, two wastewater-treatment companies, Biothane Corporation and RCM Digesters Inc., formed a joint venture, RCM Biothane.

In June 2005, the computer networks of Biothane’s parent company, Joseph Oat Holdings Inc., and the joint venture, RCM Biothane, were connected via a virtual private network. Biothane employees in New Jersey administered the VPN and controlled the RCM Biothane server located in Oakland, Calif.

In August 2006, the parties entered into a separation agreement purporting to end the joint venture. Evidence indicated that RCM continued to operate RCM Biothane after that date.

In September 2006, Biothane sued RCM for trademark infringement, unfair competition, breach of contract, and various other counts.

On Oct. 11, 2006, RCM’s attorney sent Biothane a litigation hold letter. On Oct. 20, he sent a second letter reiterating his request that Biothane preserve all electronic data.

Around the same time that Biothane received the litigation hold letter, it began to systematically copy the files from the joint venture’s server, to which it still had access. Internal memos referred to this as the “information copy project” and instructed employees to do this “under the rader.” A Biothane V.P. later testified that he ordered the copying in response to RCM’s litigation-hold letter and believed he had a responsibility to preserve these files.

When it discovered the copying, RCM, claiming the servers had reverted to its control, filed a motion to amend its counterclaim to add counts alleging violations of California, New Jersey and U.S. anti-hacking laws. RCM also filed a motion asking for discovery sanctions against Biothane for its copying of the files.

Ruling on the request for sanctions, a U.S. magistrate judge found that Biothane’s copying of the documents was “willful” but not in “flagrant bad faith.” He concluded that Biothane “accessed defendants’ computer to preserve business documents, not for the purpose of gaining an advantage in this litigation.” Finding that Biothane could have believed it was justified in accessing the documents, the magistrate judge imposed a fairly modest sanction of paying RCM’s costs, but not attorneys’ fees, incurred in discovery directed to finding out what documents were taken from RCM’s computer system.

via The Thin Line Between Electronic Discovery and Hacking | Catalyst E-Discovery Blog.

Airline Pilots Boycott Full Body Scanners | News & Opinion | PCMag.com

As the White House continues a long-term plan to double the number of full-body scanners in airports by 2014, an American Airlines captain has urged fellow pilots to boycott the voluntary screening.

According a letter obtained by The Atlantic, Captain Dave Bates, president of the Allied Pilots Association, which represents 11,000 American Airlines pilots, has sent a letter to other pilots urging them to refuse a full-body scan on the grounds of radiation over-exposure and an invasion of privacy.

“It is important to note that there are “backscatter” [Advanced Imaging Technology] devices now being deployed that produce ionizing radiation, which could be harmful to your health,” Bates wrote in the letter, dated November 1st. “Airline pilots in the United States already receive higher doses of radiation in their on-the-job environment than nearly every other category of worker in the United States, including nuclear power plant employees.”

Also last week, the Electronic Privacy Information Center (EPIC) filed a lawsuit against the Transportation Security Authority (TSA) over its full-body scanning program, on the grounds that it was an unconstitutional and unecessary invasion of privacy.

via Airline Pilots Boycott Full Body Scanners | News & Opinion | PCMag.com.

Privacy advocates fear massive fed health database – Computerworld

Several privacy groups have raised alarms over plans by the U.S. Office of Personnel Management (OPM) to build a database that would contain information about the healthcare claims of millions of Americans.

The concerns have surfaced because the OPM has provided few details about the new database and because the data collected will be shared with law enforcement, third-party researchers and others.

In a letter to OPM Director John Berry, the Center for Democracy and Technology (CDT) and 15 other organizations asked the agency to release more details on the need for the database and how the data contained in it will be protected and used.

The OPM “should not create this massive database full of detailed individual health records without giving the public a full and fair chance to evaluate the specifics of the program,” the letter cautioned.

It also called upon the OPM to delay its proposed Nov. 15 launch date for the database because there was not enough time for independent observers to evaluate the proposal.

via Privacy advocates fear massive fed health database – Computerworld.

NHBR > Is your company prepared for a ‘litigation hold’?

Q. Sarah, vice president of human resources, receives a letter from counsel by a former employee detailing allegations of sexual harassment against two co-workers and a supervisor who had knowledge of the harassment. The allegations include jokes and lewd pictures being sent to the former employee by these co-workers as well as sexually suggestive remarks in front of the supervisor. At the end of the letter, the counsel advises the company to put a “litigation hold” on all relevant information and to preserve all electronic data, including all e-mails and texts, of these co-workers, the supervisor, the former employee and others. What are the company’s obligations?

A. The destruction of evidence by a litigant, whether the destruction was intentional or accidental, may lead to court sanctions, such as fines or the loss of a lawsuit. A company can fall into a trap if it is not aware of its preservation duties and fails to have effective procedures in place to ensure that its responsibilities are satisfied.

Spoliation – the destruction or significant alteration of evidence – also encompasses the failure to preserve evidence in pending or reasonably foreseeable litigation. To avoid spoliation, a company must know when it has an obligation to preserve information and what information it must preserve.

The obligation to preserve evidence arises when a party has notice that the information is relevant to litigation or when a party should have known that the information may be relevant to future litigation. In other words, evidence must be preserved when litigation is “reasonably anticipated.” The usual circumstances kick-starting this duty might be a lawyer’s letter, notice of a complaint with a federal or state agency or notice of a lawsuit, or even when an employee makes internal complaints to managers and human resources people where they anticipate the possibility of litigation.

via NHBR > Is your company prepared for a ‘litigation hold’?.

Google has been fibbing about data mining – Consumer Watchdog reckons it’s in cahoots with US gov | TechEye

Consumer Watchdog has said that the Energy and Commerce Committee really must conduct hearings into Google privacy violations, with information coming to light about Google’s classified contracts with the US government.

Consumer Watchdog’s John M. Simpson wrote in a letter to the Energy and Commerce Committee: “It appes that Google holds classified US government contracts to supply search and geospatial information to the US government. In addition, White House records show that Google executives have been holding meetings with US national security officials for undisclosed reasons. Finally, it also appears that Google’s widely criticised efforts to collect wireless network data on American citizens were not inadvertent, contrary to the company’s claims.”

The letter suggests that an affiliation between Google and the US intelligence squad on collecting data, or indeed any giant corporation, will be a “toxic combination” for the US constitution.

via Google has been fibbing about data mining – Consumer Watchdog reckons it’s in cahoots with US gov | TechEye.

Germany officials launch legal action against Facebook | BBC News

German officials have launched legal proceedings against Facebook for accessing and saving the personal data of people who do not use the site.

Facebook could face fines of tens of thousands of euros under privacy laws.

The social networking firm confirmed it had received a letter about the action.

“We consider the saving of data from third parties, in this context, to be against data privacy laws,” said Johannes Caspar, head of Hamburg’s Data Protection Authority.

via BBC News – Germany officials launch legal action against Facebook.