Huge Trove of Employee Records Discovered At Abandoned Toys 'R' Us (hackaday.com) 112
An anonymous reader writes: Hackaday recently engaged in a bit of urban exploration, taking a look inside of a recently purchased Toys "R" Us location that has been boarded up since the once giant toy store chain folded in June. Inside they found plenty of hardware left behind, from point-of-sale systems to the Cisco networking gear in the server room. But the most interesting find was on paper.
In a back office, they found "several boxes" of personal information about the store's employees, from their medical records to photocopies of their driver's licenses and Social Security cards [and also tax forms]. A video included with the article gives the viewer an impression of just how large a collection of files were left behind.
The author wonders if the situation in this particular store was a fluke, or if the other [800] Toys "R" Us locations were left in a similar state.
The article calls it "a very surprising look at what get's left behind when the money runs out and the employees simply give up...."
"We saw the great lengths the company went to protect customer information, so to see how little regard they had for their own people was honestly infuriating."
In a back office, they found "several boxes" of personal information about the store's employees, from their medical records to photocopies of their driver's licenses and Social Security cards [and also tax forms]. A video included with the article gives the viewer an impression of just how large a collection of files were left behind.
The author wonders if the situation in this particular store was a fluke, or if the other [800] Toys "R" Us locations were left in a similar state.
The article calls it "a very surprising look at what get's left behind when the money runs out and the employees simply give up...."
"We saw the great lengths the company went to protect customer information, so to see how little regard they had for their own people was honestly infuriating."
The old fashioned way (Score:2)
Paper hacking
Trespass. Breaking and Entering (Score:2, Insightful)
So they call it 'urban exploring'?
Reading, reading, and more reading. (Score:3, Informative)
From the article you didn't read.
But much to my surprise, a friend of mine recently invited me to join him on a trip to the now defunct toy store. His wife’s company purchased one of the buildings for its ideal location near a main highway, and before the scrappers came through to clean everything out, he thought I might like a chance to see what was left.
Re: (Score:2)
eh, husband and wife own things jointly in these United States. Husband can invite friends into his property.
Re: (Score:2)
Re: (Score:2)
false, in the United States it absolutely is the default. Ask anyone in a divorce. Look up things before spewing
Re: (Score:2)
Re: (Score:2)
and anything bought during the marriage, like the property in the article, is of both. which is the default
Re: (Score:1)
Are you trying to determine if they are vampires?
Come on, no-one at a company will realistically care who you take with you to look over a new building jus purchased before it's even been cleaned out or renovated.
Re: (Score:2)
They will care if someone is injured. They'll also care if this husband publishes any of those medical details: when the facility was purchased, that woman's company may have assumed responsibility for those medical records. A transfer of responsibility for fiscal records would seem a sensible and common part of the sale of a company, even of a franchise such as a Toys R' Us facility.
Re: Reading, reading, and more reading. (Score:2)
Re: (Score:2)
Excuse me, please, but no. I was referring specifically to "people at a company" from the previous poster, namely the people from the company that bought the old building. I was not attempting to confuse "they" with a different group.
As things stand, there is no sign that the data has been misused or illegally publicized. But the idea that no one cares, or should care, is a dangerous and mistaken one. Personally, I've been confronted with "what do I do with these records" questions when buying a company. It
Re: (Score:1)
Did his friend's wife's company gave their employees's husband and his friends explicit permission to enter the premises?
That does NOT make it trespassing. Trespassing works the other way: Unless you cross a boundary, such as a door, fence with signs, or locked gate, then you are not trespassing unless you are explicitly told to leave, and refuse to do so.
If you enter a building with people that have permission to be there, they open the door for you, and nobody tells you to leave, then you are not trespassing.
Re: (Score:3)
"You're actually considered trespassing even on someones front door step if no one is home."
That is the most twisted logic I've heard in a while, as you're completely and totally wrong. If I walk up to your door and knock, or ring the doorbell. I am not trespassing. If I go further than that, then I might be trespassing depe
Re: (Score:2)
Re: (Score:1)
Quite.
Here (Canada), it's not illegal to enter someone's house even if the door is unlocked. It's not "breaking and entering", as an example.
And police have often just "walked in" to a house when the door is unlocked. There's a lot of history in common law, and in Canada (and I'm sure the UK, where common law comes from), people have for example an 'outer room'. This room is traditionally where people remove their winter boots, yet it's still part of the house.
But you can't actually knock at the REAL doo
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Sfill illegal as hell, but hey, it's a lot of fun. Hint: Forced entry is not required to be guilty of trespassing. It can be an additional charge on top of trespassing if it occurred, but trespassing is a prosecutable offense without it. If it's private property that's not yours and you have any reason to belie
Re: (Score:2)
Re: (Score:2)
Given that the only legal fiction that would have any reason to care is currently pining for the fjords, no harm, no foul.
Re: (Score:2)
Depends. Trespass requires an actual barrier that prevents entry, and breaking and entering require same.
More often than not, some door or gate is left unlocked or other point of entry, at which point the urban explorer will generally exploit.
There are a few on YouTube, and they often document places that are closed down. Depending on your point of view, they can either be a nuisance by being where they shouldn't be (proper urban exploration means touching and taking nothin
Re: (Score:2)
This would seem like a perfect time to say "So sue me!". "Urban exploration" differs from breaking and entering in that absolutely no one gives a shit.
Reminds me of when we moved into a new office ... (Score:5, Interesting)
Reminds me of when we moved to a new office at our university.
The old office used to be a different department and they left behind a cabinet full of documents.
It was full of files of applicants, those who had applied to the department as faculty and students. Each of these files had all the recommendation letters.
I read through a whole bunch of recommendation letters to see how people write them. Most of them were really weird and would not be happy if the applicant read it.
They were not negative but not quite positive either. Just strange mostly.
I couldn't believe that they had just left confidential documents behind. I tried to get them to retrieve the documents but I got no reply. I was quite furious that I had to deal with their cabinets full of their crap and just left it all outside as trash to be picked up. Who knows who read them and what happened to them afterwards.
Re: (Score:2)
You probably should’ve reported it to the university itself. At our university, at least, the bureaucrats take their rules and forms very seriously. They like nothing better than to enforce even trivial rules... the sort of breach of trust you describe would probably result in a public flogging.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
I thought this was puzzling, too.
Best thing I could think of would be paperwork the employee had to fill out documenting a medical condition that interfered with work or resulted from an on the job injury.
Ordinary medical treatment involving a doctor, I don't know how a specific store location would see this even if TRU had been the insurer of record. Some kind of statement about the employee treatments (using the bizarre, technical coding language of health insurance) may have gone to some TRU home office
Re: (Score:3)
There could also be reporting of medical history for insurance applications, medical absences, negotiations for insurance disputes, and ADA accomodations.
Re: (Score:2)
workers comp
That’s why (Score:3)
The last person at that location should set fire to the building.
Re: (Score:2)
Now don't be jumping to conclusions...
Re: (Score:3, Funny)
Welcome to Slashdot, Milton
Re: (Score:1)
S'cuse me, s'cuse me, I think you have my stapler...
Re: (Score:2)
I think it would be a lot saner to just burn the documents.
Happens all the time.... (Score:3, Interesting)
As someone who was arbitrarily put in charge of "shutting down" a company after they closed their doors, I can attest that there are few guidelines, and few specific instructions.
In my case, I was told to make backups of all the "important stuff" and send it to the parent company. I was also told to contact all lease companies and tell them to come get their shit.
Beyond that, I was given no instructions on what to do with paper documents (shred them?), and nobody seemed to give two shits about what happened to any remaining assets.
I left that company with a new desk and chair for my home office, and a small stockpile of equipment that was off-lease. The rest was left for the landlord of the building to deal with.
Re: (Score:2)
Beyond that, I was given no instructions on what to do with paper documents (shred them?), and nobody seemed to give two shits about what happened to any remaining assets.
Channel your inner Oliver North and have a shredding party...
Re: (Score:2)
Beyond that, I was given no instructions on what to do with paper documents (shred them?), and nobody seemed to give two shits about what happened to any remaining assets.
Channel your inner Oliver North and have a shredding party...
Yeah, but shredding large volumes takes a lot of time if you don't have an industrial shredder. In a bankruptcy case, nobody gives two shits about this stuff. What are you going to do, sue them? They aren't going to pay for your time to carefully shred everything, they aren't going to pay for a third-party shredding service to bring a truck on-site. My guess is that if you even call and ask them what to do they'll tell you to quit screwing around and get back to work.
Re: (Score:2)
Given that there was a stockpile of personal information about the employees themselves, perhaps they would have destroyed it out of their own self interest...
It's hard for employees to manage that (Score:4, Insightful)
Hopefully the other stores that are being turned into halloween stores are going to do a better job handling the flotsam.
Re:It's hard for employees to manage that (Score:4, Interesting)
The liquidators take liability for disposal, in this case were liquidators appointed, they should be prosecuted for failing to properly dispose of what are by law protected records, especially medical records.
Re: (Score:2)
The liquidators take liability for disposal, in this case were liquidators appointed, they should be prosecuted for failing to properly dispose of what are by law protected records, especially medical records.
They should, yes. Will they though? Most likely not. They'll point the finger elsewhere and it will quickly be forgotten. After all, it would impede profit to go further.
Re: (Score:2)
There was a scrapping company due to either destroy or refit the building. They'd not arrived yet.
Re: (Score:2)
The liquidators take liability for disposal, in this case were liquidators appointed, they should be prosecuted for failing to properly dispose of what are by law protected records, especially medical records.
Why? As an employee, you now have a contractual agreement with a defunct company. There is nobody left who is responsible for those records. Maybe the facility was resold to someone in the bankruptcy process, but those records are not their responsibility (they now own the facility, they are not a continuation of the business itself).
This is a general problem with our system. Companies do all sorts of negative things with no provision for cleanup if/when they die. Go out of business with a facility ful
So somewhat similar but not really to NCIX (Score:4, Interesting)
When a company goes out, it's not rare for customers/employees data to be later found mismanaged.
Like recently, NCIX, a defunct computer hardware store, had a massive databreach due to them essentially leaving their old database servers on location in a place they couldn't pay the rent at, so they essentially gave everything to the landlord... Who sold it to people who made use of that data to make a profit by selling it to China.
This include Social security numbers, past addresses, names and many other information, basically everything you need to steal someone's identity, of their current and past employees. There's even disk images of employees work and home computers in some cases, including compromising pictures, perfect for blackmailing.
Along with credit card numbers, name, addresses, passwords, email, etc.. of customers.
All of it in plain text within the databases that they carelessly left out when they went out.
All this crap should've been shredded in an industrial shredder, instead they literally just gave it away, opening them to serious legal trouble even if they went bankrupt. It's a clear case of complete negligence and wrongdoing.
Re: So somewhat similar but not really to NCIX (Score:1)
Donâ(TM)t forget about the photocopiers as well. Many contain a hard drive containing everything they ever copied.
Re: (Score:2)
That's not how corporations work in the US. Corporations can just walk away from any and all of their responsibilities.
That wasn't nearly the worst part (Score:4, Funny)
The abandoned records were nothing compared to the shocking sight that was found near the back of the stockroom:
The rotting body of an emaciated cartoon giraffe, its neck still chained to a standpipe.
Re: (Score:2)
I'd think this is more common than not (Score:5, Interesting)
In my experience, I've always had to clean out old papers and trash when moving a business or business group into a "new" office. Much of that was just moving a group around within the facilities of a large corporation (one of the Dow 30), but, you'd think that would be better because the folks that moved out weren't losing their jobs.
I've actually encountered the same thing with houses. I've done some flipping, and it is remarkable how many people leave almost everything.
One home I rebuilt had been the home of a family with at least two young children. All of the clothes were still there, toys left where they had last been played with, kitchen fully stocked, dishes in the sink, bills in the drawers, all of the normal bathroom stuff in the bathroom, family pictures on the walls and in photo albums, and on and on. In my imagination, I figured they had been in a wreck or something where everyone died. I checked just to satisfy my curiosity and found that they had decided to move to Europe and just abandoned everything they couldn't take with them on the plane.
I'd do the same (Score:2)
What!?!?! (Score:2)
Inside they found plenty of hardware left behind
'Cuse me, I think I hear my mom calling me. I'll see y'all tomorrow -- sorry, going to be somewhat busy tonight.
Standard employment docs (Score:3)
The tax documents are probably the W-4 form [irs.gov]. They're used to determine how much of your paycheck is withheld (sent directly to the IRS) for income taxes. If an employee is dishonest or wrong and the incorrect amount is withheld (usually the employee errs on the low side), it gets corrected on April 15. If the employee had too little withheld, they could face fines. So the employer has to keep the W4 on file as proof that the incorrect withholding wasn't their fault, and they did as the employee told them to do. It's a matter that is entirely between the employee and the IRS, but the IRS doesn't want to do it themselves (employee could submit the W4 to the IRS, and the IRS could tell the employer how much to withhold). So they require employers to do it and force them to keep each employee's W4 on file. This one has always baffled me - the IRS verifies it anyway when the employee files their taxes, so it's not like the IRS would have to do any extra work to handle it themselves instead of foisting the job onto employers..
Both are usually shoved in a filing cabinet and forgotten about, since the government requires you to keep them but they're never used for anything again (unless you happen to be raided by INS or ICE)..
Re: (Score:3)
Driver's license and Social Security number are the most commonly used documents for the I-9 form [uscis.gov]. Basically, the government doesn't want you hiring aliens and visitors without a work visa, but don't have a system in place for an employer to verify if someone is authorized to work in the country (is a citizen or has a work visa).
Yes, why doesn't the government have a system like that... [e-verify.gov]
Re: (Score:3)
Yes, why doesn't the government have a system like that... [e-verify.gov]
The E-Verify system has its problems.
We were forced to use it when we hired international students - basically recently foreign graduates.
It requires every hire must be subjected to the E-Verify system. You cannot check someone and not others.
It has some false positives and can delay work. You have to get the green light from E-Verify before the person start the work. If for some reason the e-verify system goofs up (some record some department hasn't updated somewhere), which it did a few times, you h
medical records? (Score:2)
Meh (Score:2)