Insiders Selling Data

There is a report that the lowest-paid employees at various banks are selling customer data, which is sad and also not unexpected. Those who have access to sensitive information can be tempted to part with it for a quick profit. I've seen this in the past in restaurants and retail stores. Sometimes with credit card or other data, but also with knowledge (or keys) that would let someone burglarize the premises.

There's a great quote in the article that says: "The more employees there are inside a company with access to sensitive customer information, the higher the risk that access is going to be abused." I think that's very true in most companies, which is why governance and data controls are becoming more important in some organizations. I wish it were a global trend at all companies, but far too many don't think there is a high risk, or that their employees will abuse their privileges.

I'd like to think most IT people wouldn't be tempted to sell or disclose info, but I'm not sure that's true. While many IT staffers are paid well, well is relative. Some might not think they're compensated enough or they might feel pressure from their own financial stresses to compromise that data of others.

Privileged access is just that: privileged. While it can be a pain to have a separate account for certain access, the intention is that you are reminded that this account can access things that others should not see. In my career, I've tried to remember this and be careful with my access, though admittedly, I've done plenty of non-privileged things with a privileged account, being lucky enough that nothing bad happened.

Security continues to be a problem in so many places, and with the vast amounts of data we collect, and the growing desire for many organizations to let AI LLMs view that data, I suspect we'll likely have more problems in the future not less. While we might not have as many humans that decide to sell our data, I suspect we'll have many more AIs that can be tricked into disclosing it.

Steve Jones - SSC Editor

Join the debate, and respond to the editorial on the forums

Flyway's JSON output makes it much easier to report and log database migration activities, providing structured details about version changes, execution times, and warnings. This article demonstrates how to use this JSON output along with a Flyway callback to create a human-readable log of Flyway migrations. It explores how to customize these logs with project-specific details or extend them to send notifications, helping developers better track and understand their database migration processes.

As artificial intelligence (AI) continues to evolve, its applications in text generation are becoming increasingly sophisticated. AI-generated text can be found in articles, emails, reviews, and even creative writing....

A tutorial tailored for kids. teens and beginners ...

The more I tried to research practical ways to make use of ChatGPT and Power BI, the more pissed I became. Like bitcoin and NFTs before it, this is...

Experience is overrated. Most breakthrough accomplishments were done by people doing them for the first time. Therefore when hiring hire for aptitude and attitude and then train for skills.... The...

2024 is winding down. Have you taken time to revie...

Its the time of year where things may winding down...

AWS, Azure and GCP all have a fully managed services for SQL Server databases. In this post, I’ll provide a brief overview of the offerings from these hyperscalers.

As organizations scale, data debt can accumulate silently, affecting productivity, efficiency, and decision-making quality. Data debt refers to the accrued cost of shortcuts and inefficiencies in data management that...

We'll likely find out more about Nvidia's next GPUs at CES next week.

This blog series complements a YouTube tutorial I ...

I often fall back to the tried-and-true methods to understanding Oracle environments. Yes, sometimes the older ways are best, but understanding where Oracle has been and where it’s going is essential to us building the best products to support this enterprise, robust RDBMS platform. I was disappointed by many of the documents out on the Oracle support site, etc., so this is an internal document to help understand how a seasoned Oracle DBA might navigate, learn and understand Oracle.

How To Write SQL Server Queries Correctly: Apply T...

How To Write SQL Server Queries Correctly: EXISTS and NOT EXISTS Thanks for watching! Going Further If this is the kind of SQL Server stuff you love learning about,...

How To Write SQL Server Queries Correctly: Subquer...

When SQL Server executes a query in parallel, CPU threads often share the workload unevenly. Some handle a significant portion of the rows, while others manage much less. First...

…if the Power BI “download this file” is greyed out and you’re unable to download it from the user interface.

I have known for a while that setting the Data Cat...

Flyway's JSON output makes it much easier to report and log database migration activities, providing structured details about version changes, execution times, and warnings. This article demonstrates how to...

I picked up Never Split the Difference: Negotiating As If Your Life Depended On It by Chris Voss, a former FBI negotiator. Given what I do, I realized that... The...

Introduction These are my SQL Server Diagnostic Information Queries for January 2025, aka my DMV Diagnostic Queries. They allow you to get a very comprehensive view of the configuration...

I’ve had lots of wish lists over the years, from Ladybug to Connect to UserVoice, and very few of my dreams ever come true. Still, it’s fun every once...

Der Spiegel and Chaos Computer Club were able to t...

Hyper-personalized emails use "an immense amount" of scraped data.

Prosecutions across the U.S. reveal sales via social media and the dark web.

A small win for music publishers in the fight over Claude outputs.

Budget planning is never easy. AI stands ready to help, though the human element remains vital to the process.

Apple has already pulled devices to comply with the Common Charger Directive.

Apple users may get $20 each for up to five Siri-enabled devices.

In the previous data recipe, tSQLt for Data Warehousing, test your Stored Procedure, we created our first Unit Test to validate our SQL Server Stored Procedures. In this data recipe, we will dive into the process of Database Unit Testing automation with Azure DevOps.

More Mickey Mouse versions, early talkies, and classic novels all go public.