[dnsworks]

"The police won't do anything. We had a laptop theft where someone just walked into our building and started picking up laptops. He basically said "hey I'm from IT and we are upgrading, I'm picking up old laptops and then you'll get a new one in a couple hours." He walked out with 14 laptops."

The guy who stole these 14 laptops should get arrested, go to prison, then come out and become a best selling author on the topic of Social Engineering (which means he'll sell 1,000 copies, but still, a good use of his craft).

That being said, did it really represent a gross loss of $30k? A $2k laptop is worth $1,200 the moment you open the box. Were they old laptops? Mostly depreciated? $10k in an ATM is always worth $10k.

[johngalt]

RE: Social Engineering -> these were software developers that gave up their laptops btw, not just random business users. So he must have had a good pitch.

The laptops were all less than a year old. But you could easily argue the loss value was less than their purchase value. However we still had to spend $30K to replace them all.

The data on the laptops also wasn't worthless. Thankfully the guy was just an ebay/thief and not interested in selling our sourcecode.

[dnsworks]

If he hadn't, well you would have learned the hard way to have a strong laptop encryption policy, wouldn't you have?