SRA warned employees, ex-employees and customers of a possible data breach.
In an letter ot the Maryland Attorney General’s office, SRA reported that a virus on their network may have led to data disclosure.
SRA Reports Possible Data Breach
Roger's Information Security Blog
Since 2004, a source for ranting, reviews and InfoSec news
It makes me wonder just how it happened. SRA should know better.
I’ve speculated a bit here:
http://www.dwaynetanner.com/blog/2009/02/05/sra-data-breach/
For some reason I was thinking MS08-067.
Oh, it could very well be that one but they haven’t disclosed it anywhere that I can find. The patch for that one was released 5 months ago and they should certainly know better.
Then again, they suffer from “consultant syndrome”. They have thousands of portable systems that are off the SRA network for extended periods of time while they at customer sites.
Who knows how it happened – the sad fact is that it has been happening with increasing frequency all over.