Bank tape lost with data on 90,000 customers. The lulls between these things are never long enough. Pretty routine story as far as these go, but there's a good quote. "In addition, the tape can't be read without a mainframe and software, according to the bank." Guess they've never heard of regular expressions or used "strings".
If it was encrypted I'm guessing they wouldn't have had to announce it, and if it did get out they'd be saying that it was encrypted so the data is safe. No mention seems like a bad thing.
As for the keys, if it's to protect transit more than the storage location (which is hopefully secure so it can be trusted as a place to recover from), keys could just be kept on each end without having to transport regularly which saves a lot of hastle.
Copyright ©2000-2008 Jeremy Mooney (jeremy-at-qux-dot-net)
Heh great. What are the chances that they use some type of strong crypto on their backups? Of course that would require them to keep keys around, which would preferably be backed up on separate media in a different physical location.