In Response to "It was $0 to the consumers, but certainly not Lowes":

The person did wrong and should be punished. I am not going to comment on whether or not the sentence is too long, others have done plenty of that.

My comment is to the tone of this statement. Why shouldn't Lowes have a loss. The equivalent of this is not telling their employees to lock the doors at night. The cc numbers were given to lowes by trusting shoppers.

Had I taken a mower to them for repair and they left it unlocked on the sidewalk, they would be and should be responsible for the theft. The criminal should still go to jail, but Lowes reputation would suffer as well.

With cc numbers, the stakes are much higher. Lowes as well as all networks dealing with sensitive information, need to have policies and procedures in place to protect their network. Lowe's left the doors unlocked.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10138/29551#29551