FBI Investigating Missing State Department Laptop

According to the spokeswoman, State Department regulations prohibit processing classified information on computers that are not designed to handle sensitive data. But she could not confirm that the policies cover the encryption of specific files.

Last month, a laptop containing sensitive data about Northern Ireland was stolen from an agent of Britain's MI5 internal security bureau while he was buying a train ticket at London's Paddington station. The machine was never recovered, but the information it contained was understood to be heavily encrypted and believed to be secure.

In the U.S. case, the laptop was reported missing from the State Department's Bureau of Intelligence and Research. The bureau, which handles highly classified reports, was criticized last year by the department's inspector general for lax handling of "sensitive compartmented information" that the laptop reportedly held.

In response to this and other recent security breaches at the department, Secretary of State Madeleine Albright asked the Assistant Secretary for Diplomatic Security (DS), David Carpenter, to conduct a thorough review of security at the department. Carpenter has put together a team of senior security experts from various government agencies. The review, which began in March, is expected to be completed shortly.

"The safeguarding of sensitive information is the personal responsibility of every employee in the bureau," said State Department spokesman James Rubin in a statement on Monday. "It is crucially important to U.S. national security that our employees take this responsibility and take the necessary steps to protect the information."

The spokeswoman added that the DS information security staff is currently conducting a training and awareness program throughout the State Department. She noted that each office in the department assigns a staff member to serve as a unit security officer to ensure security policies are observed.

"We are committed to improving our security," said the spokeswoman. "As there is a possibility that classified information may have been compromised, this matter is now the subject of a joint FBI and DS investigation."

"The missing laptop is the latest in a long string of security failures at the State Department," said Rep. Benjamin Gilman (R-N.Y.), who heads the House International Relations Committee, in a statement on Monday. "It is obvious that the department lacks a professional environment that is sensitive to security concerns."

Gilman was referring to a number of recent security breaches. Last year, for example, FBI agents found a Russian diplomat, whom they believe was a spy, inside the State Department. They also discovered a listening device in a conference room that the man may have been monitoring.

"Such security lapses are not acceptable," said Gilman, who says he will hold hearings next month to probe the department's security. "Whatever changes are necessary at the State Department to better protect our nation's secrets should be undertaken."

Arjen K. Lenstra, a cryptographer and vice president of the emerging technology group at Citibank Corp., said he believes most people at the State Department do not encrypt data on their laptops because it is a cumbersome process. He said he was uncertain about Citibank's official policy on laptop encryption, but noted that employees are encouraged not to let the machines out of their sight.

"Laptops are stolen all over the place, it is a risky business," said Lenstra. "I keep my laptop at home - it's too insecure to travel with."

Lenstra noted that passwords that keep thieves from accessing a computer hard disk are easily broken, and a thief can also remove the hard disk to access the data later. Even if the data is encrypted, Lenstra pointed out, most people select short, obvious passwords that can be cracked by password programs. "Users always make this stuff insecure," he said.

Lenstra added that only people using long passwords have a chance of keeping the data secure, but Microsoft Windows systems do not support the generation of long passwords.

"Unless the data is encrypted on the disk with a strong password," said Lenstra, "there is no way you can protect yourself."

Join the PC World newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ann Harrison

PC World
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?