<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

What Does Your Customer Data Have in Common with a Hit Netflix Show?

author Michael Berman
1 min read
May 4, 2017

Working in Hollywood sounds glamorous, but it turns out filmmakers and television producers out in La La Land face some of the same problems as banks and credit unions—especially when it comes to third-party vendors and IT security.

In what’s being called the largest hack of Hollywood since the Sony leak in 2014 (the one where much of the studio’s dirty laundry got aired, including executive emails badmouthing actress Angelina Jolie), a hacker has pirated the fifth season of hit Netflix show “Orange is the New Black,” Variety reports. The hacker leaked the show online more than a month before it was scheduled to hit the Netflix platform after the company refused to pay ransom.

This is very bad news for Netflix. OITNB is the subscription-dependent company’s most-watched original program, according to Variety, and now it’s free online.

If only Netflix had better vendor oversight, this problem might have been avoided.

That’s because the leak is believed to have stemmed from Larson Studios, the company that handles post-production audio for the "dramedy," Variety says. Apparently, hackers found a way to breach its IT security and steal all 10 episodes of OITNB’s newest season.

Security experts aren’t surprised, Variety reports, with many saying that vendor security has been a “weak link for Hollywood” for years.

Circumstances seem to support that argument. Netflix wasn’t the only one to outsource to Larson. Shows including FX’s “Fargo,” ABC’s “Designated Survivor” and CBS’s “NCIS: Los Angeles” also use Larson Studios, Variety reports. They may even be among the other shows the hacker claims to have stolen. He’s encouraging those networks to pay up or face the same fate as OITNB.

The same thing can and does happen to banks and credit unions. Instead of stealing the stories of the fictional inmates of Litchfield Penitentiary, they come after confidential customer data, creating huge regulatory, legal and reputation headaches.

While your institution may do everything by the book to protect data in its buildings and on its servers, you need to be certain that your third-party vendors are doing the same. Make sure you are conducting thorough, ongoing due diligence of vendors. It’s not just a regulatory requirement. Data security is the new black, and will be for a long time to come.

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Regulatory Compliance Management Nrisk News & Updates HMDA Risk Mortgage Lenders Vendor Management Ncomply CRA Business Resiliency Lending Compliance Blog Vendor CFPB Ncontinuity Business Continuity Third-Party Vendor Management Cybersecurity Fintech NVendor Strategic Planning Ncyber Regulatory Updates Ntransmittal Audits & Findings OCC Regulatory Compliance Company Culture Audit Nverify Compliance Management Exams FDIC Nfindings Findings NCUA Contract Management Employee Intranet Business Continuity Management Contract FRB Findings Management Enterprise Risk Management FFIEC Ncontracts manager Third-Party Vendors Vendor Risk Vendor Risk Management Wealth Management 1071 ABA Bank Access Control Artificial Intelligence Audit Findings Board Portal Call Report Compliance Risk Cybersecurity Assessment Digital Tansformation Due Diligence Efficiency Employee Engagement Exam findings FIEC Governance and Risk Management Inc. 5000 Internal Audit Management Nboardportal Verify integrated risk management
Don’t Let Heartbleed Lead to Vendor Management Heartbreak
Risk & Compliance

Don’t Let Heartbleed Lead to Vendor Management Heartbreak

Feb 16, 2017 1 min read
How Are You Coping with a Growing Vendor List?
Risk & Compliance

How Are You Coping with a Growing Vendor List?

Jun 30, 2017 1 min read
Should Vendor Management Report to Compliance or IT?
Risk & Compliance

Should Vendor Management Report to Compliance or IT?

Jul 18, 2018 3 min read