BILLINGS – A Billings man who used a falsified bank loan to receive $50,000 admitted to charges Thursday, Acting U.S. Attorney Mark Steger Smith said.
Jordan Andrew Hennessy, 38, pleaded guilty to one count of bank fraud. Hennessy faces up to 30 years in prison, a $1 million fine, five years of supervised release and a $100 special assessment.
U.S. Magistrate Judge Timothy J. Cavan presided and sentencing was set for a later date. U.S. District Judge Susan P. Watters will determine a sentence after considering the U.S. Sentencing Guidelines and other statutory factors. Hennessy was released pending further proceedings.
The government alleged in court documents that Hennessy, while employed by First Interstate Bank, falsified a loan application and awarded himself $50,000.
The incident began on March 11, 2022, when Hennessy was working as the commercial relationship manager for First…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.