Zappos' hack can be used to gain marketing's support for security efforts
Putting a premium on customer service increases need for top-of-the-line security.
The Zappos hack is a perfect illustration of how much marketing can depend on security – even if it doesn’t know it. Hopefully, IT security execs will be able to use it to demonstrate the huge risks companies take with inadequately staffed and funded security.
Zappos.com is a high-end clothing retailer that puts a premium on customer service in order to charge premium prices. Its data base was broken into over the weekend, exposing the personal information of 24 million customers. While no credit card info was taken, the criminals may have gotten customers' names, email addresses, billing and shipping addresses, phone numbers, the last four digits of their credit card number and/or the scrambled password on their account.
Chief Executive Tony Hsieh sent an email to employees on Sunday saying, "We've spent over 12 years building our reputation, brand, and trust with our customers. It's painful to see us take so many steps back due to a single incident.”
Hsieh said all headquarters employees were being taken off any other assignment to help customers. This was being done by email. The CEO said he had had the company’s phones turned off because the system wouldn’t have been able to handle the volume of calls. Needless to say, it is also easier to give out the same information to many people via email than by voice.
Customers are being directed to go to Zappos.com and change their password. However, as of yesterday, the website was only accessible to U.S. customers.
While an information breach is never good for brand value, in cases where the company places a high premium on customer service the damage is significantly greater. Despite IT execs’ best efforts, companies frequently do not understand this until after they’ve suffered a loss. Although marketing and security aren’t usually natural corporate allies, the Zappos incident (along with many others) is a great thing to use to get support for security efforts.
Previous Post: Senator Backpedaling on Key Part of SOPANext Post: Symantec's New Explanation of Source Code Theft Doesn't Make Sense
Most Discussed Posts
Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.
Sponsored Links
