Pakistani Gold Medalist’s Death Sparks Fraud Investigation Over Fake US Scholarship (EXCLUSIVE)
Physics graduate Laiba Ejaz lost millions of rupees to suspects who forged US government docs, promising admission to Harvard University, prompting federal investigation and calls for tighter regulation of overseas education consultants
By Arshad Mehmood/The Media Line [ISLAMABAD] The death of a 24-year-old Pakistani physics gold medalist who dreamed of becoming a scientist has sparked a national outcry and prompted a federal investigation into an alleged education consultancy fraud that cost her family millions of rupees.
Laiba Ejaz, from Sargodha in Pakistan’s Punjab province, was found dead on Friday, October 9, at a weekly market in Islamabad’s G-10 sector. Police said her body was found hanging from a tree, with a traditional scarf tied around her neck.
Investigators are examining…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.
