BOSTON – The Chairman of the Needham Parks and Recreation Commission has been indicted by a federal grand jury in connection with a scheme to defraud a local little league out of hundreds of thousands of dollars.
Christopher Gerstel, 50, was charged in an 17-count indictment with 12 counts of wire fraud, two counts of filing false tax returns and three counts of failure to file tax returns. Gerstel was arrested today and will appear in federal court in Boston at 1:00 PM.
Gerstel currently serves as Chairman of the Needham Parks and Recreation Commission. From approximately early 2019 to early 2025, he was a member of the Board of Directors of Needham Baseball and Softball (NBS), a little league organization based in Needham, Mass. In his role as Vice President of Baseball Operations for NBS, Gerstel was the only NBS board member with access to the payment software system, ArbiterPay,…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.