ARN

Shell security under microscope after massive data leak

Campaigners supporting Nigerian citizens receive Shell staff data

The security measures at Royal Dutch Shell are under close scrutiny after the details of 176,000 employees and contractors were emailed to campaigners.

Shell has been the target of extensive campaigning, particularly over its operations in Nigeria. Last year it reached a $15 million out of court settlement, over its alleged involvement in the death of Nigerian activists including the poet Ken Saro-Wiwa. Shell said the payment did not mean it accepted responsibility.

Shell's IT security systems and procedures apparently failed to prevent an email being sent by disaffected staff to campaigners, with an attachment of the contact details of its employees. Details included home telephone numbers of some staff who worked remotely.

The data is approximately six months old, which could suggest it was taken by a former employee, the Financial Times speculated.

BP, one of Shell's largest competitors, in 2008 told employees to be careful about emailing sensitive data, especially when "a telephone call will suffice".

The email of Shell data, sent this week, called for a "peaceful corporate revolution" at the company. There was a 170-page covering letter, which aimed to highlight human rights violations allegedly caused by Shell's operations to Nigeria's Ogoni people.

The message also called for NGO staff to become undercover employees at large corporations, in order to push for a change in practices.

Shell told the FT that the database was genuine, but claimed it did not pose a security risk because it did not contain home addresses. It said it did not believe the notion that disaffected staff had sent the data.

Nominations for the 2012 ARN IT Industry Awards open on Tuesday, June 12.

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the ARN comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: data leak, security, shell
rhs_login_lockGet exclusive access to ARN's news, research and invitation only events.
ARN Distributor Directory
Find distributors by name | vendor | location
Channel Deals
/deals/avg/2011-02-25_368_avg-wants-you
AVG (AU/NZ) Pty Ltd

AVG Wants You!

More details »
ARN Vendor Directory
Find vendors by name | category

iAsset is a channel management ecosystem that automates all major aspects of the entire sales,marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.