Recently, a Pfizer employee’s spouse loaded unauthorized software onto the employee’s laptop, and 17,000 current and former Pfizer employees had their names and Social Security numbers copied.

According to Peter Rost, Pfizer didn’t care enough about its employees to make certain that such critical data was properly encrypted:

What they can and should do is to assure there are appropriate routines and encryption in place to protect sensitive data even if such data is leaked. Clearly Pfizer didn’t care enough to do that.

Pfizer has since offered employees a free credit monitoring program for one year.

The eDrugSearch Blog has learned that the identity thieves have agreed to wait exactly one year and one day before attempting to use any Pfizer employee’s identity.