BINGHAMTON, N.Y. (WBNG) — A Johnson City man was arraigned in federal court on charges including access device fraud, theft of government property and aggravated identity theft, according to the U.S. Attorney’s Office.
On Monday, Nov. 2, 59-year-old David Darling appeared before U.S. Magistrate Judge Miroslav Lovric after an Albany federal grand jury returned an indictment in September 2026.
“As alleged in the indictment, this defendant used an unauthorized ATM card to withdraw funds intended for a deceased beneficiary for nearly six years, resulting in a Social Security program loss of over $109,000,” said First Assistant U.S. Attorney John A. Sarcone III.
Sarcone said the office remains dedicated to prosecuting individuals who steal federal funds intended for living beneficiaries relying on public assistance.
“This case reflects our unwavering commitment to protecting the integrity of…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.