CyberInsecure.com

Unauthorized Access To Stryker Corporation Employees Database

On February 18, 2008, Stryker Instruments, a division of Stryker Corporation, discovered that an unauthorized user recently gained access to its virtual private network (VPN) multiple times over a period of several months. One of the servers accessed by the unauthorized user contained a database of Social Security numbers of certain employees in 48 different states and Puerto Rico.

Stryker immediately disabled the domain administrator service account through which the unauthorized user had accessed the VPN. It then promptly began investigating the incident and engaged an independent computer forensics investigator to determine the scope of the breach and the identity of the unauthorized user. The investigation revealed that the unauthorized user accessed several Stryker servers and applications. Stryker and its computer forensics investigator were unable to conclude whether the database was actually accessed of whether any Social Security numbers were acquired.

Based on the manner in which the user acquired access to Stryker’s network and the user’s network activity, Stryker believes the unauthorized user is a former employee with prior knowledge of the network. Stryker suspects a particular employee, but has been unable to confirm whether that individual is, in fact, the unauthorized user. Stryker contacted the office of its local U.S. Attorney and the Federal Bureau of Investigation in Kalamazoo, Michigan to inquire whether the FBI would investigate the matter further. On March 20, 2008, the FBI informed Stryker that based on current information, it would not pursue a criminal investigation.

Stryker will provide a notice of the security incident to each potentially affected employee and mailed the notice to affected employees on April 10, 2008.

In order to prevent future security breaches of this nature, Stryker took certain action immediately after discovering this breach: discontinued access to the VPN through the domain administrator service accounts, performed an audit of its privileged access accounts and eliminated any unnecessary service accounts, changed the passwords of all service accounts, implemented a policy to prohibit user password changes via telephone. Stryker also plans to implement a number of additional preventative measures in the coming months.

If you have any questions or believe you may have an identity theft issue, please call ID TheftSmart member services at 1-800-588-9839 between 9:00 a.m. and 6:00 p.m. (Eastern Time), Monday through Friday.

Posted in Privacy |  Print This Post