David Lazarus at SF Chronicle reported an incident last week where ADP sent out more than 1,000 post cards bearing Adecco employee’s names. The cards were supposed to contain only information on how to access benefits information online.
The company unofficially blamed the mishap on a printing error. No, it is not. It is a security bug! I am sure that they have quality assurance teams at ADP that test their printing systems. What’s missing I guess is that security testing is still not engrained in the qa process. Commonly functional tests passed with flying colors but nobody really seriously think about testing for security. Security is social engineering. Until the entire society (and companies in particular) are all become aware of security issues, there will be no end to such incidents like this.