{"id":6906,"date":"2014-02-04T04:03:44","date_gmt":"2014-02-04T12:03:44","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=6906"},"modified":"2019-04-20T16:24:35","modified_gmt":"2019-04-20T16:24:35","slug":"the-tale-of-a-cibc-lack-of-safety-deposit-box","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=6906","title":{"rendered":"The tale of a CIBC (lack of) safety deposit box"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[\n\n<p>The Canadian Imperial Bank of Commerce (French: Banque Canadienne Imp&eacute;riale de Commerce), commonly CIBC, is one of Canada&#39;s chartered banks headquartered in Toronto, Canada.&nbsp; <img decoding=\"async\" alt=\"CIBC Logo\" src=\"http:\/\/upload.wikimedia.org\/wikipedia\/en\/thumb\/c\/cf\/CIBC_logo.svg\/200px-CIBC_logo.svg.png\" style=\"width: 128px; height: 115px; float: right;\" \/>A Kapuskasing, Ontario branch customer&#39;s daughter, Anne Johnson, has&nbsp;made an alarming <a href=\"http:\/\/ireport.cnn.com\/docs\/DOC-1080186\" target=\"_blank\" rel=\"noopener noreferrer\">discovery<\/a> of how easily a safety deposit box was accessed by her sibling without his documented authorization.&nbsp;<\/p>\n\n\n\n\n<p>The incident occurred in 2009 while Anne was settling her mother&#39;s estate after her passing.&nbsp;<\/p>\n\n\n\n\n<blockquote>\n\n\n<p><span>It appears from CIBC&rsquo;s position that in absence of my mother&rsquo;s presence, her verbal consent or &ldquo;say so&rdquo; stated by the family member entering the safety deposit box, was enough to allow access. Later his &ldquo;say so&rdquo; was also enough for CIBC to state there was nothing of value in the safety deposit box.<\/span><\/p>\n\n\n<\/blockquote>\n\n\n\n\n<p>Anne alleges the bank failed to follow proper policy and did not validate the existence of any authorizing documentation.&nbsp; Despite this, they acknowledge he signed the entry card&nbsp;logging access to&nbsp;the safety deposit box.&nbsp; Apparently, a verbal &quot;says so&quot; grants one entry to a safety deposit box.<\/p>\n\n\n\n\n<p>\n<iframe src=\"\/\/rcm-na.amazon-adsystem.com\/e\/cm?lt1=_blank&bc1=000000&IS2=1&bg1=FFFFFF&fc1=000000&lc1=0000FF&t=infosecpro0c-20&o=1&p=8&l=as4&m=amazon&f=ifr&ref=ss_til&asins=B000B5YHPI&MsrketPlace=US\" style=\"width:120px;height:240px;\" scrolling=\"no\" marginwidth=\"0\" marginheight=\"0\" frameborder=\"0\"><\/iframe>\n<\/p>\n\n\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[67,65],"tags":[],"class_list":["post-6906","post","type-post","status-publish","format-standard","hentry","category-practices","category-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6906"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6906\/revisions"}],"predecessor-version":[{"id":7959,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6906\/revisions\/7959"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}