> Can you as the CIO be trusted with highly personal, highly sensitive data on millions of Americans?
Perhaps a better question is: can anyone be expected to properly secure data on that scale, against well-resourced malicious actors?
Perhaps a better question is: can anyone be expected to properly secure data on that scale, against well-resourced malicious actors?
https://www.washingtonpost.com/world/national-security/chine...
How about when Google's data center links were tapped by the NSA?
https://www.washingtonpost.com/world/national-security/nsa-i...
Google right after the NSA reveal started doubling up on their efforts to use encrypted links between servers within their data centers, leading me to believe that it could have been a lot worse - just get access to some non-critical host, and if the traffic is unencrypted, just hang out with a packet sniffer and just record all traffic passing by.
Google is much more vigilant with their security (not that they weren't before, just even more so) - It's better to not underestimate the extent of breaches.
Bitcoin Security Forum Gmail Dump: In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old.
Compromised data: Email addresses, Passwords
https://www.washingtonpost.com/world/national-security/nsa-i...
Therefore, if google isn't storing large numbers of credit cards, social security numbers of health records they probably will never tell you wether or not they had their servers breached.