Pfizer Data Breaches Infuriate Employees
1 CommentBy Ed Silverman // September 9th, 2007 // 9:47 am
The comments on the drugmaker’s Intranet system, known as Pfizer World, are largely filled with venom over the handling of the string of security breaches, which compromised personal data for tens of thousands of current and former Pfizer employees so far this year. The episodes prompted attention for law enforcement and a putative class-action lawsuit. Here is breach one, two and three. The Day, a newspaper that circulates near Pfizer’s Groton, Ct., R&D facility, ran a few employee remarks…
• “Let’s see…401K match in an underperforming stock and the ability to have your personal information leaked to the world. This is a premier employer?†asks a posting from New Jersey.
• “This is pathetic,†writes an employee from Pfizer Global Research & Development in Groton. “(1) multiple breaches of personal information (2) wait 2 months before telling anyone (3) give those affected the bare minimum information of what even happened…who do you have to sue to get answers around here … I read about this in the New London Day 2 weeks ago…maybe I call them for answers.â€
• “Once again, Pfizer values come through,†says another employee from Groton. “Pfizer used to be a company that you could trust, now it’s just a job.â€
• “It’s a disgrace that seven weeks passed before affected colleagues were notified,†says an anonymous poster from St. Louis. “Pfizer has rigorous programs in place to protect THEIR intellectual property. It is obvious that Pfizer does not have an equally robust program to protect OUR personal information.â€
• “If Pfizer information and security systems are so flawed as to allow so much damage to be done by just a couple of colleagues and not be dealt with more swiftly, how can we be sure that only 34,000, or 52,000 employees are affected?†asked another post from Kalamazoo.
David Cadden, a professor of management at Quinnipiac University in Hamden, said employees had a legitimate reason to be angry at Pfizer, since they felt like managers weren’t being forthcoming with info about the data breaches.
“It’s called ‘mushroom theory,’ †says Cadden. “Keep people in the dark and feed them (expletive deleted).â€
He says some companies “tend to deal with mistakes like doctors do – bury them and play the ostrich role.†A better idea is for managers to open up to employees and identify themselves as victims, too. “Managers and organizations have to realize they’re in a relationship with employees. The loss of trust could take decades to reacquire.â€
No kidding. For a few other insights and a couple of positive employee comments, you can read the rest of the story here.
Sal Giorgianni. Pharm.D
It does give one pause to reflect on the potential implications of these security breaches on the integrity of clinical, financial and other propritary data. This is not just a Pfizer problem but a big business problem. As companies collect more and more sensitive information on all matter of things, store it electronically I(sometimes in large-linked databases) and then outsorce it all for management and storage the risks for security breaches become enormous.
While none of this was plesent for anyone concerned and puts Pfizer management in an uncomfortable and reactive mode, I am sure the company will respond ernestly. This is a complex matter and they have a right to be given adequate time to adress this and other potential security information gaps.