Corporate security should establish a single point of contact as a kind of central clearinghouse for employees who think they may have been the target of a social engineering ruse. Having a single place to report security incidents will provide an effective early-warning system that will make it clear when a coordinated attack is under way, so that any damage can be controlled immediately.
Thomas Jefferson said maintaining our freedom required “eternal vigilance.” Maintaining privacy and security in a society that uses information as currency requires no less.
The technique is called name-dropping, and it’s usually used as a method to quickly establish rapport by influencing the target to believe that the attacker is connected with somebody in authority.
When you steal money or goods, somebody will notice it’s gone. When you steal information, most of the time no one will notice because the information is still in their possession.