Slashdot Mirror
Bank Goofs, and Judge Orders Gmail Account Nuked
An anonymous reader writes "The Rocky Mountain Bank, based in Wyoming, accidentally sent confidential financial information to the wrong Gmail account. When Google refused to identify the innocent account owner's information, citing its privacy policy, the bank filed in Federal court to have the account deactivated and the user's information revealed. District Judge James Ware granted the bank's request, with the result that the user has had his email access cut off without any wrongdoing or knowledge of why." The Reg's earlier story says, "Rocky Mountain Bank had asked to court to keep its suit under seal, hoping to avoid panic among its customers and a 'surge of inquiry.' But obviously, this wasn't successful."
Quick! We need the normal lot of haters in here to spin this as Google being evil! Um... um... they... they host their services in a country that they very well know is subject to U.S. judges' decisions! Yeah! They should've known better! Obviously, Google is evil! TEH SIGNS ARE EVAREEWERE!
Why is the bank sending sensitive customer information to an email account hosted by a provider known for rifling though it's user's emails for information?
Also having a moment of gratitude that I don't use gmail.
Also wondering if I can send someone I don't like sensitive email, and then have a judge erase their email account erased.
San Francisco Photographers
...if a judge in, say, Korea granted the same request to have a gmail account blocked, an innocent user in, say, Germany would loose his email...even if that email contained confidental and critical information to be used by its owner...this is quite pathetic and something should be put in place to stop these low level distric judges making decisions that could affect users across the globe.
At least Google offers free POP and IMAP access, so it's trivial to back up your email locally. I'd still be pissed if something like this happened to me, but Google isn't to blame.
How can I believe you when you tell me what I don't want to hear?
If I get e-mails from banks that I have no relation with, it is usually spam and gets instantly deleted.
Perhaps that's why the recipient of the bank's private data didn't respond to any of their e-mails.
Also, why is a bank sending it's customers' private information over an unsecure connection (e-mail)? Wouldn't the bank be violating security rules even if the e-mail address was correct?
Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
Wouldn't this be like having a package wrongly delivered to your house (through no fault of your own: the sender had the wrong address), and since it contained highly confidential information, a judge ordered your house to be burned to the ground? (Okay, that's a bit extreme, but you get my point.)
If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
...wait. I mean, the account holder at this point has probably seen and done any damage that they are going to do with this information. How precisely is this going to help the bank's cause?
Of course, the account may be inactive and they may well have gotten to it before the person who owned it logged in again, but I do have to wonder why it is the recipient's problem that the bank sent this information. If the bank sent me that sort of information in the mail, does that mean that the county can order my house burned down to make sure I can't read that mail, even though I probably have already read it in full?
These decisions make no sense to me sometimes and it scares me because for some things I use only one email account and if my contacts disappeared, I might not be able to find some of these people again easily. I guess it's time to start backing up all my account data to my home machine by default.
This is yet another strike against "cloud computing" taking over. If they can order your account just plain zapped because a bank fucked up, I don't see how anyone's data is safe. At least if you had it stored at home or at work on your own machine, you'd at least know what the hell happened to it.
So why not post the judge's personal info: email, snail mail, phone, etc.?
I'd imagine that a few months of being throttled to unusable status may make that judge rethink the decision.
This decision was handed down by "Lying Judge" Ware. http://www.fa-ir.org/ai/judgeware.htm
Talk about lifetime appointment gone haywire.
The bank requested the user's identity. Google refused to provide it. So then the bank goes to court not only to get the user's identity but to deactivate the user's account. I'm missing the logic. Okay, maybe the bank fears that enough time has passed that the user has seen the errant email and wants to prevent the user from misusing the information. Now, that might work if the user does not have a local copy of the email. On the other hand, if the user has a local copy and is now angry at the bank for having had their gmail account shut down, the user, who might otherwise have done nothing, now has both the means and the motive to do something. Good move. Wouldn't it have been possible for Google to contact the gmail user and ask him to delete any local copies? And Google, presumably, could have deleted the email from its own servers. I like Google's policy of protecting user identities. But this whole mess sounds like two bureaucrats blindly following policy to the detriment of the end-users. Can't anyone think anymore?
linquendum tondere
Presumably they need the user's identity because after step 1: Deactivate account, they need to proceed with step 2: Deactivate user (in case he read the email, he has confidential info in his brain.)
Of course, if that user has communicated with anyone then they will need to be deactivated as well, and so on, and so on... All I know is in the future I'm autoforwarding all my emails from Rocky Mountain Bank to Rush Limbaugh! :)
Not from the United States and not too familiar with the U.S. Constitution, but wouldn't this be a blatant violation of the first amendment?
There is a clearly innocent party here who has had a primary communication medium forcibly disconnected. Not only can they not talk about this confidential material (which there may be an argument for preventing), but they can't talk to anyone about anything. That sounds like a massive violation of freedom of expression...
I run my email on my own email server... In my house. What would they have done if they accidentally sent the email to me?
Those "other victims" as you call them chose to do business with Shitty Bank And Trust.
This is America. If they don't like how that choice turned out, they can vote with their feet. This decision by this judge only serves to preserve as many customers as possible for the bank, and dare I say that the bank does not have the right to have its customer-base preserved via the judicial system.
What I'm saying is that I dont care if it was 1 account, 50 accounts, or 1 million accounts. Shitty Bank And Trust does not deserve preservation here. They deserve to lose all the customers directly affected, plus other customers who go unaffected but or now severely concerned about their privacy.
"His name was James Damore."
Who represented the rights of the user to the court?
Was a public defendant even involved, or was no one assigned because there was no face to the account that was deleted?
Help! I'm a slashdot refugee.
...every few weeks. I have tried to contact the bank (Chase) to let them know that they're sending to the wrong account.
They make it fucking impossible to contact them - UNLESS I log on with the account to do so (or call them, which I don't feel like doing because I don't live in the USA).
Every couple weeks I reply to the email (even though it says "don't reply", it has a unique reply-to, so I hold out some hope that maybe someone keeps an eye on the occasional reply). This has been going on for months. Attempts to navigate the website to find a simple contact page appear to be futile - there /must/ be one (right?) but I can't find it at a glance, and how much time should I be investing in this, seriously?!
I haven't looked at the emails closely because I don't care what's in them, but I'm sure there's some personal/confidential information in them - and if not, as the owner of the email address, I'm sure I could request some more stuff to get sent to me.
I really want to fix this problem, rather than just hit 'spam' so gmail bins them all (which helps noone, I feel). But the bank has not taken this scenario into account adequately enough - and until they are forced to, they just won't bother.
(Why do banks send emails at all? They should /only/ ever send emails to people that have opted in with a public key so they can be securely signed. Yes, that cuts out a lot of people, but seriously, the people that it cuts out will be better off for it.)
There is a debate between economists on whether inflation should just include the price of products excluding food and energy or should it include housing and health insurance. Both housing and insurance have trippled since the late 1990's. Sure on paper it looks like you make the same but a $175,000 home in 1999 costs $350,000 even during the recession. Suddenly $55,000 a year is not worth jack in most metropolitan areas even if prices do not necessarily show it.
If you health care costs were put in the inflation equation with housing we would see a totally different side of economics that economists should have prevented if they only knew.
Something does need to be done.
http://saveie6.com/
Have you looked at the cost of "every little thing" on the list of charges from an average doctor's visit? Even the most trivial item or service is ridiculously expensive.
It would make plenty of sense to cover oil changes, tune-ups and brake jobs if the cost comparison were similar to what you see in medical costs. An oil change costs anywhere from $10 to $25 out where I live. Brake jobs can range anywhere from $50 to $150 for basic stuff. If a doctor visit cost that and included anything other than an examination, that would be terrific. And if the cost of prescriptions were somehow less than the price of 4 cans of motor oil, I'd be right there with you. But that is simply not the case. Drugs are ridiculously expensive. (When my youngest was an infant and was experiencing some severe allergies, the doctor prescribed a ridiculously expensive tube of something that cost over $100 at the pharmacy! I bought it but my out of pocket was like $50 versus $10-$15 because my insurer didn't want to cover that drug.)
If people don't need their medical stuff all the time, they wouldn't need to be so concerned about it. But when a medical problem arises, it often involves months if not years of continuous treatment all on the same scale as I have been describing... expensive drugs, expensive office visits, expensive procedures, expensive tests. And people who are well insured are still getting hit hard because the cost of the insurance is still prohibitively expensive.
I consider myself lucky. I don't have any medical problems. My wife and children don't either. That is really fortunate. But there are lots of people who aren't so fortunate... lots. And it does often cost people their homes because it often comes down to completing medical treatments or paying the mortgage. Insurers drop or deny coverage QUITE often which is yet another talking point in favor of healthcare reform.
I get the feeling you simply don't understand what healthcare costs really are because you haven't really paid any before.
I went to a major hospital in washington state some years ago. After a major laceration to my forehead, here's a rough breakdown of the cost.
$900 - Basic ER fee
$330 - Stitches, local anesthetic
$35 - 500mg Acetaminophen(2)
Yep, you read that right. Thirty five fucking dollars for 2 tylenol. If they told me in advance, I would have said "stuff it. I got tylenol at home assholes".
There is no accountability in health care for keeping costs down. Health insurance is a misnomer because everyone needs health care at some point. It's gone from insuring yourself against catastrophic financial repercussions due to personal injury and illness, to a giant socialistic slush fund where we all dump in hundreds of dollars per month which we then spend when we go to the doctor and pay a small co-pay and somehow think we saved money.
Here in Minnesota, we have a lot of clinics that offer basic health services at a fraction of what you would pay at a normal doctor or hospital. We need a lot more clinics nationwide that offer these types of health services without breaking the bank. Insurance won't go down as long as the health care system is structured as it is.
You can't legislate goodness. Let each to his own destiny, by will of his freely made choices.