<html><body>
<DIV> </DIV>
<DIV>FYI</DIV>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">-------------- Forwarded Message: -------------- <BR>From: "Jason Williams" <jwilliams@director.sca.org> <BR>To: <announcements@sca.org> <BR>Subject: [Announcements] Recent burglary at the SCA Corporate offices <BR>Date: Wed, 29 Nov 2006 00:25:48 +0000 <BR><BR>To: The Membership of the SCA, Inc. <BR>From: George Reed, Vice President of Operations <BR>SUBJ: Burglary at the SCA Corporate offices <BR><BR>Sometime during the weekend of Thanksgiving, 2006 the SCA Corporate office <BR>suffered an illegal intrusion and burglary. This was part of a <BR>crime-spree that affected the entire office complex in which our <BR>facilities are located. Initial reports are that the intruders used a <BR>stolen master key obtained from the property manager and raided many of <BR>the suites in the complex. While the property loss sustained by the SCA <BR>was fairly minimal, two desktop workstations
were
taken, and the manner of <BR>their removal caused an interruption in the SCA 1-800 toll free number. <BR><BR>Actions taken by our Vice President of Corporate Operations, Renee <BR>Signorotti, included changing the office locks by 10 am PST on Monday, <BR>replacing and re-configuring the missing machines, and ensuring any risk <BR>to the membership was ruled out. Our Chief Technology officer effected <BR>immediate password changes to electronic mail and SCA servers to ensure <BR>the minimal risk of exposure became zero risk. At no time did the <BR>perpetrators have access to any membership information, financial records, <BR>or credit card numbers. <BR><BR>Because Renee?s office procedure includes not saving local passwords and <BR>using proper levels of information security, there is no chance that the <BR>end-recipients of the stolen machines can retrieve any personal, <BR>financial, or business sensitive information. No critical business data <BR>existed on the stolen machi
nes th
at were not part of the end of day <BR>back-ups prior to the theft. <BR><BR>I would like this letter to the membership to serve as confirmation that <BR>we did sustain an incident, but that the losses were minimal, full-service <BR>to the membership quickly restored, and no ongoing risk to your membership <BR>data or services remains. At the end of this letter is some questions and <BR>answers from our Chief Technology Officer, Scott Courtenay. <BR><BR>I would like to take this opportunity to applaud and commend the excellent <BR>business practices, astute technology decisions, and swift responses of <BR>our Corporate Office and our Technology staff for making this incident an <BR>annoyance instead of a disaster. <BR><BR>If you have any questions, please feel free to contact me for quick <BR>response at Seneschal@sca.org. <BR><BR>Thank you, <BR><BR>George L. Reed II <BR>VP Operations <BR>Society for Creative Anachronism, Inc. <BR><BR>----- <BR><BR>Q: Did they get access to th
e SCA
servers? <BR>A: No. The computers in the home office had only limited access (such as <BR>personal email accounts) to the SCA servers, which are located in a secure <BR>data center. The passwords for all personal accounts of home office <BR>personnel were immediately changed to protect even this limited access. <BR>No one at the home office had access to the administrative password on our <BR>servers. <BR><BR>Q: I ordered a membership or something from the Stock Clerk recently. Did <BR>the thieves get my credit card number from these databases? <BR>A: No. For security reasons which should be very apparent, we don't store <BR>credit card numbers in our databases. When you process an order, the <BR>number is held just long enough to complete the transaction and then is <BR>"forgotten" by the system. It is never actually stored in the Stock Clerk <BR>or membership database. <BR><BR>Q: I have a Known World Mail account. Were these compromised? <BR>A: No. They are on the servers i
n a se
cure data center, not at the <BR>corporate office. <BR><BR><BR><BR><BR>Comments are strongly encouraged and can be sent to: <BR>SCA Inc. <BR>Box 360789 <BR>Milpitas, CA 95036 <BR><BR>You may also email comments@lists.sca.org <BR>or reply to this message. <BR><BR>This announcement is an official informational release by the Society for <BR>Creative Anachronism , Inc. Permission is granted to reproduce this <BR>announcement in its entirety in newsletters, websites and electronic mailing <BR>lists. <BR><BR>_______________________________________________ <BR>Announcements mailing list <BR>To unsubscribe or change your settings, visit: <BR>http://lists.sca.org/listinfo/announcements <BR><BR>To change the email address you receive these messages at, visit the URL <BR>listed above, subscribe to with your new email address. Once this is <BR>completed, return to the URL listed above and unsubscribe your old email <BR>address. </BLOCKQUOTE></body></html>