Judge Sentences Data Thief to 13 Months
DATA LOSS—U.S.January 18, 2012
After pleading guilty to charges of hacking his former employer's database, stealing patient data and deleting it from the company's system, Eric McNeal was sentenced to 13 months in prison, three years of post-release supervision and 120 hours of community service, reports Information Week. McNeal downloaded the names, telephone numbers and addresses of patients of perinatal practice APA and used them to carry out a direct marketing campaign for his current employer--a competitor of APA. One cybersecurity expert says this highlights the importance of having and enforcing exit strategies for employees, including "cutting off the employee's access to all of the company's databases..."