The Chino Police Department on Friday announced the arrest of a suspect following an extensive investigation into an organized EBT fraud and ATM skimming operation.
According to the department, investigators with the Criminal Investigations Bureau recovered fraudulent EBT cards, ATM skimming devices, computers, cell phones, cash and hundreds of cards believed to have been used to encode stolen EBT and ATM information.
The investigation also determined that the suspect was an international fugitive from Eastern Europe who was wanted for organized crime and human and child trafficking offenses, police said.
Authorities said the investigation disrupted what they described as a sophisticated fraud operation targeting EBT recipients.
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.