bureaucracybusters

Posts Tagged ‘AIRLINES’

THE GOOD NEWS IN THE ASHLEY MADISON SCANDAL

In Bureaucracy, Business, Law Enforcement, Social commentary on August 26, 2015 at 9:50 am

It’s the nightmare-come-true for corporate America.

Name-brand companies, trusted by millions, hit with massive data breaches.

And with a series of keystrokes, the most sensitive financial and personal information of their employees and/or customers is compromised.

Among those companies:

  • Target
  • Kmart
  • Home Depot
  • JPMorgan/Chase
  • Staples
  • Dairy Queen
  • Anthem, Inc.
  • Sony Pictures
  • Primera Blue Cross
  • U.S. Postal Service

Click here: Data Breach Tracker: All the Major Companies That Have Been Hacked | Money.com

And as of July 15, Ashley Madison joined this list.

Ashley Madison is, of course, the notorious website for cheating wives and husbands.

Launched in 2001, its catchy slogan is: “Life is short.  Have an affair.”

One of its ads featured a photo of a woman apparently kneeling at the feet of a bare-chested man, her hand passionately clawing at his belt.  Next to her was the caption: “Join FREE & change your life today.  Guaranteed!”

Ashley Madison - Ashley Madison Agency

Ashley Madison claims to have more than 37 million members.  And now, untold numbers of them may find their lives changed forever.

Its hackers were enraged at the company’s refusal to fully delete users’ profiles unless it received a $19 fee.

Referring to themselves as “The Impact Team,” they stated in an online manifesto: “Full Delete netted [Avid Life Media, the parent company of Ashley Madison] $1.7 million in revenue in 2014.  It’s also a complete lie.

“Users almost always pay with credit card; their purchase details are not removed as promised, and include real names and address, which is of course the most important information the users want removed.”

On July 20, Avid Life Media defended the service, and said it would make it free.

Adultery-dating website Ashley Madison hacked

The hackers demanded: “AM [Ashley Madison] AND EM [Established Men] MUST SHUT DOWN IMMEDIATELY PERMANENTLY.

“We have taken over all systems in your entire office and production domains, all customer information databases, source code repositories, financial records, emails.

“Shutting down AM and EM will cost you, but non-compliance will cost you more.”

The hackers threatened to “release all customer records, including profiles with all the customers’ secret sexual fantasies and matching credit card transactions, real names and addresses, and employee documents and emails.”

Avid Life Media assured its customers that it had hired “one of the world’s top IT security teams” to work on the breach:

“At this time, we have been able to secure our sites, and close the unauthorized access points. We are working with law enforcement agencies, which are investigating this criminal act.”

This statement gives new meaning to the phrase, “Closing the barn door after the cow has gotten out.”

And it raises the question: Why wasn’t this “top IT security team” hired at the outset?

After all, its database is a blackmailer’s dream-come-true. Yet apparently its owners didn’t care enough about the privacy of their customers to provide adequate security.

On August 18, the hackers began releasing their pirated information.

As usual during a corporation’s data breach, Ashley Madison issued a reassuring statement: “We are working with law enforcement agencies, which are investigating this criminal act.

“Any and all parties responsible for this act of cyber-terrorism will be held responsible.”

Eight of those customers (so far) have decided to hold Ashley Madison responsible. They have filed lawsuits against the company in California, Georgia, Minnesota, Missouri, Tennessee and Texas.

They seek class-action status to represent Ashley Madison’s 37 million users.

The lawsuits claim negligence, breach of contract and privacy violations. They charge that Ashley Madison failed to take reasonable steps to protect the security of its users, including those who paid the $19 fee to have their information deleted.

If they win–and force the owners of Ashley Madison to pay up big-time–this could set a precedent for lawsuits by other victims of such data breaches.

An October 22, 2014 “commentary” published in Forbes magazine raised the highly disturbing question: “Cybersecurity: Does Corporate America Really Care?”

And the answer is clearly: No.

Its author is John Hering, co-founder and executive director of Lookout, which bills itself as “the world leader in mobile security for consumers and enterprises alike.”

Click here: Cybersecurity: Does corporate America really care?

“One thing is clear,” writes Hering. “CEOs need to put security on their strategic agendas alongside revenue growth and other issues given priority in boardrooms.”

Hering warns that “CEOs don’t seem to be making security a priority.”  And he offers several reasons for this:

  • The sheer number of data compromises;
  • Relatively little consumer outcry;
  • Almost no impact on the companies’ standing on Wall Street;
  • Executives may consider such breaches part of the cost of doing business.

“Sales figures and new products are top of mind,” writes Hering. “Shoring up IT systems aren’t.”

The key to sharply reducing data breaches lies in holding greed-obsessed CEOs financially accountable for their criminal negligence.

Only then will their  mindset of “We don’t care, we don’t have to” be replaced with: “We care, because our heads will roll if we don’t.”

FIGHT AIRLINE ARROGANCE!

In Bureaucracy, Business, Self-Help on August 3, 2015 at 10:33 am

It’s the height of the summer vacation season.  A time when air travel–and airline arrogance–are at their annual height.

Consider the following real-life scenario:

  • You’re vacationing in Denver and must return to San Francisco for an urgent-care medical appointment
  • You’re disabled but nevertheless arrive at the airport on time.
  • The airport–in violation of the Americans With Disabilities Act–doesn’t have anyone assigned to help disabled passengers get onto departing planes.
  • As a result, you arrive at the gate–just as the plane takes off.
  • The airline informs you that if you want to board a plane, you’ll have to pay for another ticket.
  • You can’t afford to buy another ticket–and your urgent-care appointment is tomorrow.

What do you do?

In this case, the stranded passenger–a friend of mine–called me: Bureaucracybuster.

First, I instinctively called the airline company. And that meant starting at the top–the president’s office.

I punched the name of the airline–and the words, “Board of Directors”–into Google. This gave me several websites to click on to obtain the information I needed.

I started dialing–and quickly hung up: I had just remembered the day was a Sunday. Nobody but cleaning crews would be occupying the airline’s executive offices that day.

I had to start all over.

Next, I decided to call Denver Airport and find an official who would help Rachel onto another flight–without charging her for it.

I didn’t know where to start, so I decided that starting anywhere was just fine. As I was routed from one person to another, I would develop a sense of who I needed to reach.

Some of those I reached seemed genuinely concerned with Rachel’s plight. Others gave me the “that’s-life-in-the-big-city” attitude.

One of the latter felt I wasn’t deferential enough in my tone. He threatened to notify the chief of airport security.

“Go ahead,” I said. “I once worked for the United States Attorney’s Office. I’ll be glad to talk with him.”

He backed off–just as I had assumed he would.

Usually the best way to deal with threats is to directly confront the person making them.

(A friend of mine, Richard St. Germain, spent part of his 11 years with the U.S. Marshals Service protecting Mafia witnesses.

Related image

Witness being protected by deputy U.S. marshals

(Many of them didn’t like the places where they were to be relocated under new identities. “I’m going to complain to the Attorney General,” some of them would threaten.

(St. Germain would reach for his office phone, plant it before the witness, and say, “Call him. I’ll give you his number.”  The witness always backed off.)

Eventually I reached the Chief of Airport Operations.

I outlined what had happened. He didn’t seem very sympathetic. So I decided to transfer the problem from Rachel to the airport.

Without raising my voice, I said: “It isn’t her fault that your airport was in non-compliance with the Americans With Disabilities Act and she missed her flight because there wasn’t anyone to assist her.”

Suddenly his tone changed–and I could tell I had definitely reached him.

No doubt visions of federal investigations, private lawsuits and truly bad publicity for his airport flashed across his mind. And all this had been achieved without my making an overt threat of any kind.

He said he would see to it that she got onto another flight without having to buy a second ticket.

I called Rachel to give her the good news. But a few minutes later she called me back, almost in tears.

The airline official at the departure gate was giving her a bad time: “If we have to choose between you and another passenger who has a ticket for this flight, he’ll go, not you.”

She laid out a series of other scenarios under which Rachel would remain stranded in Denver.

So once again I called the Chief of Airport Operations: “I just got a call from Rachel. She’s being hassled by an official at the gate. Can you please send someone over there and put a stop to this nonsense?”

A few minutes later, I got another call from Rachel–this one totally upbeat. She said that a man who identified himself only as an airport official–but wearing an expensive suit–had visited her at the gate.

When the ticket-taking airline official had protested, he had cut her off. The official had then walked Rachel and her baggage onto an otherwise fully-loaded 777 jet bound for San Francisco.

Soon she was en route to San Francisco for her urgent-care medical appointment the next day.

Related image

So if you’re having troubles with an airline:

  • Start by calling the highest-ranking airline official you can reach.
  • You may be able to find this out by punching the name of the airline in Google
  • If the official isn’t available or sympathetic, call the airport.
  • Be persistent–but businesslike.
  • Don’t let yourself be bullied.
  • If you can cite a legal violation by the airline and/or airport, don’t hesitate to do so.
  • But don’t make overt threats: the official will get the message
  • Don’t hesitate to play for sympathy: “This is a woman has an urgent-care doctor’s appointment….”

Then cross your fingers and hope for the best.

DATA SECURITY BREACHES: “WE DON’T CARE, WE DON’T HAVE TO”: PART TWO (END)

In Bureaucracy, Business, History, Law, Law Enforcement, Social commentary on July 21, 2015 at 9:35 am

It’s become as routine as the robbery of the corner liquor store.

Name-brand companies, trusted by millions, hit with massive data breaches that compromise their customers’ and/or employees’ most sensitive financial and personal information.

Among those companies:

  • Target
  • Kmart
  • Home Depot
  • JPMorgan/Chase
  • Staples
  • Dairy Queen
  • Anthem, Inc.
  • Sony Pictures
  • Primera Blue Cross
  • U.S. Postal Service

Click here: Data Breach Tracker: All the Major Companies That Have Been Hacked | Money.com

And as of July 15, Ashley Madison joined this list.

Ashley Madison is, of course, the notorious website for cheating wives and husbands.

Launched in 2001, its catchy slogan is: “Life is short.  Have an affair.”

One of its ads featured a photo of a woman apparently kneeling at the feet of a bare-chested man, her hand passionately clawing at his belt.  Next to her was the caption: “Join FREE & change your life today.  Guaranteed!”

Ashley Madison claims to have more than 37 million members.

Calling themselves “The Impact Team,” hackers appear to be enraged at the company’s “full delete” service, which promises to completely erase a user’s profile and all associated data for a $19 fee.

“Full Delete netted [Avid Life Media, the parent company of Ashley Madison] $1.7 million in revenue in 2014,” the hackers were quoted as saying in an online manifesto.  “It’s also a complete lie.

“Users almost always pay with credit card; their purchase details are not removed as promised, and include real names and address, which is of course the most important information the users want removed.”

On July 20, Avid Life Media defended the service, and said it would make it free.

Adultery-dating website Ashley Madison hacked

The hackers demanded: “AM [Ashley Madison] AND EM [Established Men] MUST SHUT DOWN IMMEDIATELY PERMANENTLY.

“We have taken over all systems in your entire office and production domains, all customer information databases, source code repositories, financial records, emails.

“Shutting down AM and EM will cost you, but non-compliance will cost you more.”

The hackers threatened to “release all customer records, including profiles with all the customers’ secret sexual fantasies and matching credit card transactions, real names and addresses, and employee documents and emails.”

Interestingly, the hackers did not target the company’s “CougarLife” website, which caters to female members seeking “a young stud.”

Avid Life Media assured its customers that it had hired “one of the world’s top IT security teams” to work on the breach:

“At this time, we have been able to secure our sites, and close the unauthorized access points. We are working with law enforcement agencies, which are investigating this criminal act.”

This statement gives new meaning to the phrase, “Closing the barn door after the cow has gotten out.”

It’s almost comical, except for the fact that the marriages of millions of people are likely to be threatened by the release of such information.

And it raises the question: Why wasn’t this “top IT security team” hired at the outset?

A website offering cheating services to those wealthy enough to afford high-priced fees is an obvious target for hackers. After all, its database is a blackmailer’s dream-come-true.

This latest breach comes about two months after a similar dating site, Adult FriendFinder–with an estimated 64 million members–was hit with a similar attack.

Again, it was clear that a site like this would be a prime target for those seeking information for blackmail. Yet apparently its owners didn’t care enough about the privacy of their customers to provide adequate security.

“Without question, this is incredibly valuable information,” said J.J. Thompson, founder and chief executive of Rook Security, an IT security firm.

“[Ashley Madison’s customers] are now vulnerable to a significant secret.”

As usual when a corporation’s data breach occurs, Ashley Madison issued a reassuring statement: “We are working with law enforcement agencies, which are investigating this criminal act.

“Any and all parties responsible for this act of cyber-terrorism will be held responsible.”

Brave-sounding words.  But if the hackers make good on their threat, many prominent men in business and politics may soon find themselves facing expensive divorces.

And if that happens, at least some of them may well decide to take out their anger and embarrassment on the websits that assured them that the highly private information they shared was “100% secure.”

That could set a precedent for lawsuits by other victims of such data breaches. Which, in turn, could force profit-obsessed corporations to responsibly protect the highly sensitive information entrusted to them.

There is an important lesson to be learned from this latest disaster.

“Stuff that’s online is pretty much not private, no matter what you might hope or think or wish for,” said Geoff Webb, senior director of solution strategy for security management firm NetIQ.

Old records, like transactions and account details, remain in company databases long after you’ve deleted an account, he said, because the company needs them for tax and other business purposes.

“There used to be an old saying that everybody ends up naked on the Internet at some point,” said Webb.

Although that was meant figuratively, patrons of websites like Ashley Madison could soon find it applying literally.

DATA SECURITY BREACHES: “WE DON’T CARE, WE DON’T HAVE TO”: PART ONE (OF TWO)

In Bureaucracy, Business, Law, Law Enforcement, Social commentary on July 20, 2015 at 12:20 pm

Comedian Lily Tomlin rose to fame on the 1960s comedy hit, Rowan & Martin’s Laugh-In, as Ernestine, the rude, sarcastic switchboard operator for Ma Bell.

She would tap into customers’ calls, interrupt them, make snide remarks about their personal lives.  And her victims included celebrities as much as run-of-the-mill customers.

Lily Tomlin as Ernestine

She introduced herself as working for “the phone company, serving everyone from presidents and kings to the scum of the earth.”

But perhaps the line for which her character is best remembered was: “We don’t care. We don’t have to. We’re the phone company.”

Watching Ernestine on Laugh-In was a blast for millions of TV viewers.  But facing such corporate arrogance in real-life is no laughing matter.

Clearly, too many companies take the same attitude as Ernestine: “We don’t care.  We don’t have to.”

This is especially true for companies that are supposed to safeguard their customers’ most sensitive information–such as their credit card numbers, addresses, emails and phone numbers.

An October 22, 2014 “commentary” published in Forbes magazine raised the highly disturbing question: “Cybersecurity: Does Corporate America Really Care?”

And the answer is clearly: No.

Its author is John Hering, co-founder and executive director of Lookout, which bills itself as “the world leader in mobile security for consumers and enterprises alike.”

Click here: Cybersecurity: Does corporate America really care?

October, 2014 proved a bad month for credit card-using customers of Kmart, Staples and Dairy Queen.

All these corporations reported data breeches involving the theft of credit card numbers of countless numbers of customers.

Earlier breaches had hit Target, Home Depot and JPMorgan/Chase.

And on February 5, 2015, health insurance giant Anthem Inc. announced that hackers had breached its computer system and accessed the medical records of tens of millions of its customers and employees.

Anthem, the nation’s second-largest health insurer, said the infiltrated database held records on up to 80 million people.

Among the customers’ information accessed:

  • Names
  • Birthdates
  • Social Security numbers
  • Member ID numbers
  • Addresses
  • Phone numbers
  • Email addresses and
  • Employment information.

Some of the customer data may also include details on their income.

Click here: Anthem hack exposes data on 80 million; experts warn of identity theft – LA Times

Bad as that news was, worse was to come.

A February 5 story by the Wall Street Journal revealed that Anthem stored the Social Security numbers of 80 million customers without encrypting them.

The company believes that hackers used a stolen employee password to access the database

Anthem’s alleged reason for refusing to encrypt such sensitive data: Doing so would have made it harder for the company’s employees to track health care trends or share data with state and Federal health providers.

Anthem spokeswoman Kristin Binns blamed the data breach on employers and government agencies who “require us to maintain a member’s Social Security number in our systems so that their systems can uniquely identify their members.”

She said that Anthem encrypts personal data when it moves in or out of its database–but not where it  is stored.

This is a commonplace practice in the healthcare industry.

The FBI is now investigating the hack.

According to an anonymous source, the hackers used malware that has been used almost exclusively by Chinese cyberspies.

Naturally, China has denied any wrongdoing.  With a completely straight face, Chinese Foreign Ministry spokesman Hong Lei said:

“We maintain a cooperative, open and secure cyberspace, and we hope that countries around the world will make concerted efforts to that end.”

He also said that the charge that the hackers were Chinese was “groundless.”

Click here: Health Insurer Anthem Didn’t Encrypt Stolen Data – WSJ

Meanwhile, John Hering’s complaints remain as valid today as they did last October.

“One thing is clear,” writes Hering. “CEOs need to put security on their strategic agendas alongside revenue growth and other issues given priority in boardrooms.”

Hering warns that “CEOs don’t seem to be making security a priority.”  And he offers several reasons for this:

  • The sheer number of data compromises;
  • Relatively little consumer outcry;
  • Almost no impact on the companies’ standing on Wall Street;
  • Executives may consider such breaches part of the cost of doing business.

“There’s a short-term mindset and denial of convenience in board rooms,” writes Hering.

“Top executives don’t realize their systems are vulnerable and don’t understand the risks. Sales figures and new products are top of mind; shoring up IT systems aren’t.”

There are three ways corporations can be forced to start behaving responsibly on this issue.

  1. Smart attorneys need to start filing class-action lawsuits against companies that refuse to take steps to protect their customers’ private information.  There is a name for such behavior: Criminal negligence.  And there are laws carrying serious penalties for it.
  2. There must be Federal legislation to ensure that multi-million-dollar fines are levied against such companies–and especially their CEOs–when such data breaches occur.
  3. Congress should enact legislation allowing for the prosecution of CEOs whose companies’ negligence leads to such massive data breaches. They should be considered as accessories to crime, and, if convicted, sentenced to lengthy prison terms.

Only then will the CEO mindset of “We don’t care, we don’t have to” be replaced with: “We care, because our heads will roll if we don’t.”

DATA SECURITY BREACHES: “WE DON’T CARE, WE DON’T HAVE TO”

In Bureaucracy, Business, History, Law, Politics, Social commentary on February 9, 2015 at 2:06 am

Comedian Lily Tomlin rose to fame on the 1960s comedy hit, Rowan & Martin’s Laugh-In, as Ernestine, the rude, sarcastic switchboard operator for Ma Bell.

She would tap into customers’ calls, interrupt them, make snide remarks about their personal lives.  And her victims included celebrities as much as run-of-the-mill customers.

Lily Tomlin as Ernestine

She introduced herself as working for “the phone company, serving everyone from presidents and kings to the scum of the earth.”

But perhaps the line for which her character is best remembered was: “We don’t care. We don’t have to. We’re the phone company.”

Watching Ernestine on Laugh-In was a blast for millions of TV viewers.  But facing such corporate arrogance in real-life is no laughing matter.

Clearly, too many companies take the same attitude as Ernestine: “We don’t care.  We don’t have to.”

This is especially true for companies that are supposed to safeguard their customers’ most sensitive information–such as their credit card numbers, addresses, emails and phone numbers.

An October 22, 2014 “commentary” published in Forbes magazine raised the highly disturbing question: “Cybersecurity: Does Corporate America Really Care?”

And the answer is clearly: No.

Its author is John Hering, co-founder and executive director of Lookout, which bills itself as “the world leader in mobile security for consumers and enterprises alike.”

Click here: Cybersecurity: Does corporate America really care?

October, 2014 proved a bad month for credit card-using customers of Kmart, Staples and Dairy Queen.

All these corporations reported data breeches involving the theft of credit card numbers of countless numbers of customers.

Earlier breaches had hit Target, Home Depot and JPMorgan/Chase.

And on February 5, 2015, health insurance giant Anthem Inc. announced that hackers had breached its computer system and accessed the medical records of tens of millions of its customers and employees.

Anthem, the nation’s second-largest health insurer, said the infiltrated database held records on up to 80 million people.

Among the customers’ information accessed:

  • Names
  • Birthdates
  • Social Security numbers
  • Member ID numbers
  • Addresses
  • Phone numbers
  • Email addresses and
  • Employment information.

Some of the customer data may also include details on their income.

Click here: Anthem hack exposes data on 80 million; experts warn of identity theft – LA Times

Bad as that news was, worse was to come.

A February 5 story by the Wall Street Journal revealed that Anthem stored the Social Security numbers of 80 million customers without encrypting them.

The company believes that hackers used a stolen employee password to access the database

Anthem’s alleged reason for refusing to encrypt such sensitive data: Doing so would have made it harder for the company’s employees to track health care trends or share data with state and health providers.

Anthem spokeswoman Kristin Binns blamed the data breach on employers and government agencies who “require us to maintain a member’s Social Security number in our systems so that their systems can uniquely identify their members.”

She said that Anthem encrypts personal data when it moves in or out of its database–but not where it  is stored.

This is a commonplace practice in the healthcare industry.

The FBI is now investigating the hack.

According to an anonymous source, the hackers used malware that has been used almost exclusively by Chinese cyberspies.

Naturally, China has denied any wrongdoing.  With a completely straight face, Chinese Foreign Ministry spokesman Hong Lei said:

“We maintain a cooperative, open and secure cyberspace, and we hope that countries around the world will make concerted efforts to that end.”

He also said that the charge that the hackers were Chinese was “groundless.”

Click here: Health Insurer Anthem Didn’t Encrypt Stolen Data – WSJ

Meanwhile, John Herring’s complaints remain as valid today as they did last October.

“One thing is clear,” writes Hering. “CEOs need to put security on their strategic agendas alongside revenue growth and other issues given priority in boardrooms.”

Hering warns that “CEOs don’t seem to be making security a priority.”  And he offers several reasons for this:

  • The sheer number of data compromises;
  • Relatively little consumer outcry;
  • Almost no impact on the companies’ standing on Wall Street;
  • Executives may consider such breaches part of the cost of doing business.

“There’s a short-term mindset and denial of convenience in board rooms,” writes Hering.

“Top executives don’t realize their systems are vulnerable and don’t understand the risks. Sales figures and new products are top of mind; shoring up IT systems aren’t.”

There are three ways corporations can be forced to start behaving responsibly on this issue.

  1. Smart attorneys need to start filing class-action lawsuits against companies that refuse to take steps to protect their customers’ private information.  There is a name for such behavior: Criminal negligence.  And there are laws carrying serious penalties for it.
  2. There must be Federal legislation to ensure that multi-million-dollar fines are levied against such companies–and especially their CEOs–when such data breaches occur.
  3. Congress should enact legislation allowing for the prosecution of CEOs whose companies’ negligence leads to such massive data breaches.  They should be considered as accessories to crime, and, if convicted, sentenced to lengthy prison terms.

Only then will the CEO mindset of “We don’t care, we don’t have to” be replaced with: “We care, because our heads will roll if we don’t.”

TELL YOUR AIRLINE TO FLY OFF

In Bureaucracy, Business, Self-Help, Social commentary on November 28, 2014 at 12:13 am

Imagine the following situation:

  • You’re vacationing in Denver and must return to San Francisco for an urgent-care medical appointment
  • You’re disabled but nevertheless arrive at the airport on time.
  • The airport–in violation of the Americans With Disabilities Act–doesn’t have anyone assigned to help disabled passengers get onto departing planes.
  • As a result, you arrive at the gate–just as the plane takes off.
  • The airline informs you that if you want to board a plane, you’ll have to pay for another ticket.
  • You can’t afford to buy another ticke–and your urgent-care appointment is tomorrow.

What do you do?

In this case, the stranded passenger called me: Bureaucracybuster.

First, I instinctively called the airline company. And that meant starting at the top–the president’s office.

I punched the name of the airline–and the words, “Board of Directors”–into google. This gave me several websites to click on to obtain the information I needed.

I started dialing–and quickly hung up: I had just remembered the day was a Sunday. Nobody but cleaning crews would be occupying the airline’s executive offices that day.

I had to start all over.

Next, I decided to call Denver Airport and find an official who would help Rachel onto another flight–without charging her for it.

I didn’t know where to start, so I decided that starting anywhere was just fine. As I was routed from one person to another, I would develop a sense of who I needed to reach.

Some of those I reached seemed genuinely concerned with Rachel’s plight. Others gave me the “that’s-life-in-the-big-city” attitude.

One of the latter felt I wasn’t deferential enough in my tone. He threatened to notify the chief of airport security.

“Go ahead,” I said. “I once worked for the United States Attorney’s Office. I’ll be glad to talk with him.”

He backed off–just as I had assumed he would. Usually the best way to deal with threats is to directly confront the person making them.

(A friend of mine, Richard St. Germain, spent part of his 11 years with the U.S. Marshals Service protecting Mafia witnesses. Many of them didn’t like the places where they were to be relocated under new identities.

“I’m going to complain to the Attorney General,” some of them would threaten.

St. Germain would reach for his office phone, plant it before the witness, and say, “Call him. I’ll give you his number.” The witness always backed off.)

Eventually I reached the Chief of Airport Operations. I outlined what had happened.

He didn’t seem very sympathetic. So I decided to transfer the problem from Rachel to the airport.

Without raising my voice, I said: “It isn’t her fault that your airport was in non-compliance with the Americans With Disabilities Act and she missed her flight because there wasn’t anyone to assist her.”

Suddenly his tone changed–and I could tell I had definitely reached him. No doubt visions of federal investigations, private lawsuits and truly bad publicity for his airport flashed across his mind.

And all this had been achieved without my making an overt threat of any kind.

He said he would see to it that she got onto another flight without having to buy another ticket.

I called Rachel to give her the good news. But a few minutes later she called me back, almost in tears.

The airline official at the departure gate was giving her a bad time: “If we have to choose between you and another passenger who has a ticket for this flight, he’ll go, not you.”

She laid out a series of other scenarios under which Rachel would remain stranded in Denver.

So once again I called the Chief of Airport Operations: “She’s being hassled by an official at the gate. Can you please send someone over there and put a stop to this nonsense?”

A few minutes later, I got another call from Rachel–this one totally upbeat.

She said that a man who identified himself only as an airport official–but wearing an expensive suit–had visited her at the gate. When the ticket-taking airline official had protested, he had cut her off.

The official had then walked Rachel and her baggage onto an otherwise fully-loaded 777 jet bound for San Francisco.

Soon she was en route to San Francisco for her urgent-care medical appointment the next day.

So if you’re having troubles with an airline:

  • Start by calling the highest-ranking airline official you can reach.
  • If s/he isn’t available or sympathetic, call the airport.
  • Be persistent–but businesslike.
  • Don’t let yourself be bullied.
  • If you can cite a legal violation by the airline and/or airport, don’t hesitate to do so. But don’t make overt threats.
  • Don’t hesitate to play for sympathy: “This is a woman has an urgent-care doctor’s appointment….”

Then cross your fingers and hope for the best.

KGB AIRWAYS: PART EIGHT (END)

In History, Law, Self-Help, Social commentary on November 24, 2014 at 12:00 am

So you’ve decided to sue the airline you believe wronged you.

One option is to do so in small claims court.

A plus is you don’t need an attorney. In fact, you’re barred from bringing in an attorney. You represent yourself, which means you don’t have to pay an attorney–either up-front or at the end of the case.

Another plus: It will cost you far less to represent yourself than it will cost the airline to send a representative.

If you file in California and the airline is headquartered in New York, it will be expensive for them to send a rep to attend the proceedings. If the airline fails to send someone as its representative–which is highly unlikely–it loses by default.

A minus is that you may not be the confrontational type.  You may also feel intimidated by the legal process–and afraid of looking like an idiot if you lose.

Another minus is that each state sets a different amount you can win in damages.

To learn about the rules applying to small claims courts in your state, consult the following link:

Click here: 50 State Overview of Small Claims Rules | Nolo.com.

A second option is to take your case to civil court.

A plus is that the dollar-amount you can obtain at this level is far higher than in small-claims court.

A minus is that you’ll definitely want to retain an attorney.

True, you can legally represent yourself.  But aviation law is complex.  The airline will definitely have an attorney, so if you don’t, you’re bringing a knife to a gunfight.

If you can find an attorney willing to represent you on a contingency fee basis, you don’t have to pay him unless you win.  His fee will then come out of your settlement amount.

Another minus: If you can’t find an attorney willing to take your case on this basis, you’ll have to pay him by the hour, after first putting up a retainer fee, which can be quite large.

A third minus is that the courts are clogged with cases, and it can take months or even years before yours will be heard.

And remember: The vast majority of cases–civil and criminal–are settled outside of court.  In civil cases especially, judges strongly urge both sides to reach a compromise rather than duke it out in court.

And both sides are usually willing to do this, since there’s no telling how a jury might rule.

Finally, there’s the option of filing a class-action lawsuit.

A plus to this is that you’re not alone in your charge against the airline.  Other passengers who have been similarly wronged are seeking damages, and so the spotlight is not on any one plaintiff.

A minus is that such cases are extremely complex and must be handled by experienced attorneys.

Typically, federal courts are thought to be more favorable for defendants, and state courts more favorable for plaintiffs. Many class actions are filed initially in state court. The defendant will frequently try to remove the case to federal court.

Another minus: If your side prevails, the amount of money each plaintiff receives will be far smaller than if the award were to be divided between a single plaintiff and his attorney(s).

Finally, even if you win, you can be certain the airline will appeal the verdict.  Such appeals can go on for literally years.

On a more far-reaching basis, you can demand that your Congressional representatives support passenger rights through legislation.

Protections are especially needed when a single airline official–such as a steward–kicks a passenger off an airplane for reasons that have nothing to do with security.

Examples:

  • Two women kissing;
  • A steward demanding whether a woman is wearing underwear;
  • Another steward taking offense at a passenger’s request for help.)

During the administration of President George H.W. Bush, Congress overrode only one of his 44 vetoes.  In that case, Congress put a cap on the rates cable TV companies could charge.

They did so because their constituents had made clear their rage about high-priced cable fees.

Members of the Senate and House of Representatives will respond to constituent demands:

  1. If enough voters make their specific demands known; and
  2. If those voters make clear that ignoring their demands will guarantee defeat at the next election.

There are consumer rights organizations now pressing for vitally-needed passenger protections.  These organizations need support–both in terms of members and money.

Only then can they counter the legalized bribes (known as “campaign contributions) the airlines offer to members of Congress.

An example is Flyers Rights, which can be reached at: FlyersRights.ORG – Largest Non-Profit Airline Consumer Organization.

Above all, remember: Airlines are run by corporations.

Their foremost concern is not your comfort or even safety as a passenger.  It’s with further enriching their key executives.

You must be willing to stand up for your own rights–because the airline couldn’t care less about them.

KGB AIRWAYS: PART SEVEN (OF EIGHT)

In History, Law, Self-Help, Social commentary on November 21, 2014 at 12:22 am

You can’t get the airline to take your complaint seriously but you don’t want to file a lawsuit.

So now what do you do?

You could file a complaint with one or more consumer complaint websites.  Just remember:

  • What you say online can hurt you.
  • Accuse someone of criminal or shameful behavior, and you can be sued for libel.
  • Threaten someone with exposure or financial ruin unless he pays you money and you can be privately sued and/or criminally prosecuted for extortion.
  • And once you click on the “Send” button, there’s no recalling your email.

Review the guidelines offered in Part Six of this series on how to safely craft your letter/email.

Below is a partial list of consumer complaint websites.  No endorsement is implied by this listing.  It’s offered simply to illustrate the variety of such websites available.

Your first impulse will probably be to file your complaint with a a website like one of these.

Don’t do it.

Instead, try to resolve your problem (assuming it can be resolved) with the airline.

Why?  Two reasons:

  1. You may be able to obtain what you want at that level, without having to do anything more.
  2. If you don’t give the airline the chance to address your grievance, you will be accused of pursuing a vendetta.  This will be especially true if you later sue the airline.

Use websites like these as a fallback option–in case you’re unable to can’t resolve your problem with the airlines.

And, frankly, there’s a good chance you won’t.

In its September 3, 2009 issue, Time magazine warned that calling the airlines’ customer complaint lines would likely prove a waste of time.

The major carriers have, quietly, made it steadily more difficult for customers to reach a person with their complaints. “The airlines don’t want to talk to their  customers,” says John Tschohl, a consultant to businesses on customer service.

Even the few airlines that still have customer-service numbers bury them deep within their websites.  Finding them is often as much a matter of luck as persistence.

So as advised in Part Five of this series:

  • Don’t waste your time with the Customer Service line.
  • Go directly to the topmost official(s) of the airline and make it clear why it’s in their best interests to resolve your problem. 
  • Then, if you can’t find a workable solution, file your complaint with as many consumer-protection websites as possible.

You can also file complaints with one or more federal agencies that hold jurisdiction over the airlines.

If your complaint is safety related, address it to the Federal Aviation Administration (FAA) at:

Assistant Administrator for System Safety ASY-100

Federal Aviation Administration
800 Independence Ave., S.W.
Washington, D.C. 20591

Phone: 1-866-835-5322

Click here: Contact the Aviation Safety Hotline

If your complaint involves security, direct it to the Transportation Safety Adminisration (TSA).

You can reach this by phone at 866-289-9673 or by email at tsa-contactcenter@dhs.gov.

A final option is to sue the airline.

For most people, bringing in a lawyer is like bringing up the heavy artillery.  When should you do so?

Christopher Elliott, author, consumer advocate and journalist, outlines “five times when you should consider skipping the complaints process and going straight to court:

  1. When they’re playing games.
  2. When they’ve broken a contract.
  3. When they’re being dishonest.
  4. When they’re ignoring you.
  5. When they aren’t listening to reason.

Elliott’s webpage contains a wealth of practical advice for those who’ve had their fill of airline arrogance.  It can be accessed thus:

Click here: See you in court: 5 times when you should just sue ‘em.

Yet another must-read for those wondering if they should file suit:

Click here: Lies the Airlines Tell Us – ABC News

Assuming you decide to sue, there are three ways to do this:

  1. In small claims court.
  2. In regular civil court as an individual claimant.
  3. As part of a class-action lawsuit.

Each approach has its own series of pluses and minuses.  I’ll explore these in my next–and final–part of this series.

KGB AIRWAYS: PART SIX (OF EIGHT)

In Business, Law, Self-Help, Social commentary on November 20, 2014 at 12:15 am

For your complaint to be addressed, it must first be put in writing–whether in a letter and/or an email.  Most likely, several letters and/or emails.

Even in our video-oriented society, the written word still carries far greater weight than the spoken one.  A document can be used as evidence in a civil lawsuit.

If you cringe at writing it yourself, you can ask someone else to write it for you.  But if s/he lacks excellent judgment and literary skills, you’ll be no better-off.

At best, the letter will prove ineffective and be ignored.  At worst, it could open you to charges of libel and/or extortion.

And even if the person can write an effective letter on your behalf, chances are you’ll have to pay for that service.

If you decide to write the letter yourself, you’ll find highly effective advice in Shocked, Appalled, and Dismayed: How to Write Letters of Complaint That Get Results, by Ellen Phillips.

Product Details

Click here: Amazon.com: Shocked, Appalled, and Dismayed! How to Write Letters of Complaint That Get Results (9780375701207): E

Among the subjects she covers–in detail–are:

  • Who to write to, what to say, what to ask for.
  • The names and addresses of over 600 major companies.
  • How to draft personal petitions covering everything from tenant-landlord disputes to workman’s compensation.
  • What steps to take to avoid litigation.

My own tips for writing a successful complaint letter are:

  • Remove any vulgar or profane words. 
  • Don’t make sweeping accusations: “Your agency is a waste.” 
  • Stick to facts you know can be proved: The who, what, when, where, how and why of reporting.
  • Don’t attribute motives to people you’ve had problems with.  You don’t know why someone did what he did.
  • Cite the names and titles of any airline employees who (1) can support your claim, or (2) were witnesses to the incident.

  • Show how the failure of the official to address your problem reflects badly on the company: “This is not the level of service your ads would lead potential customers to expect.”
  • Be reasonable and realistic in what you ask for. 
  • If you want reimbursement for expenses you had to make (such as hotel lodgings) owing to the airline’s fault, then provide copies of receipts.
  • Emphasize your desire to resolve the complaint amicably and privately within the company.
  • If necessary, note any regulatory agencies that can make life rough for the company if your complaint isn’t resolved. 
  • Cite the applicable law(s) under which it can be sued: “According to the Passenger Bill of Rights….”
  • Make certain the airline knows you expect a reply within a certain length of time: “I would appreciate your response within the next 10 business days.”  Otherwise they’ll feel they can afford to ignore your complaint.
  • If there is a specific action the airline can take to redress your complaint, be sure to mention it.  (You can be so angry when making a complaint that you forget to say what you want the company to do to resolve it.)

Of course, your overture(s) may be ignored.  Or you might feel the airline has not made a good-faith effort to compensate you.

In either case, you have two more courses of action to pursue.

  1. Threatening the airlines with bad publicity; and
  2. Threatening the airlines with a private lawsuit.

Thanks to the Internet, it’s far easier to spread the word about companies that mistreat their customers.

“Fly the Friendly Skies” is no longer n advertising slogan (even at United Airlines, which popularized it).  But airlines spend millions of dollars a year on selling just that image of themselves.

So anything that threatens to throw mud on that image is guaranteed to set off alarm-bells at corporate headquarters.  Especially if that mud is well-deserved.

An easy way to avenge airline mistreatment is to make full use of a wide array of consumer-opinion websites.

It’s important to check out each website carefully to increase your chances of having your complaint resolved.

  • Most websites simply offer a forum to vent your spleen.
  • Others promise to take various forms of action on your behalf–such as directing your complaint to the airline or a government agency.
  • Others offer to refer your complaint to an attorney.
  • Many of these are free.
  • Others charge a nominal fee (such as $5) for posting your complaint.
  • Some complaint websites are run by the Federal Government–such as those of the Transportation Safety Administration (TSA), the Federal Aviation Association (FAA) and the Federal Trade Commission (FTC).
  • Some are run by individual states–such as the Office of the California Attorney General.
  • The major airlines provide “file a complaint” pages on their websites.

WARNING:

  • What you say online can hurt you.
  • Accuse someone of criminal or shameful behavior, and you can be sued for libel.
  • Threaten someone with exposure or financial ruin and you can be privately sued and/or criminally prosecuted for extortion.

And once you click on the “Send” button, there’s no recalling your email.

KGB AIRWAYS: PART FIVE (OF EIGHT)

In Business, History, Law, Self-Help, Social commentary on November 19, 2014 at 12:00 am

Have a complaint against an airline–but don’t want to waste your time with low-level Customer Service reps?

Good.  You’ve just learned what is probably the single most important lesson in bureaucracy-busting: If you want action, seek out those who are empowered to make it happen.

So take your complaint to someone who has the authority to resolve it. This means, preferably, the CEO of the airline, or at least one of his executive colleagues.

But who are these people? And how do you track them down?

You start by realizing that every major airline has a website. And that website can usually be counted on to list the top honchos of the company.

Even if it doesn’t, you can usually obtain this information on the Internet. Go to “google” and type: “[Name of airline] board of directors.”

This should arm you with a series of websites providing

  • the name of the CEO;
  • the company’s mailing address;
  • its phone number for reaching its top executives; and
  • its website and/or email address.

Below are listed

  • the names of the CEOs of the major United States airlines
  • their mailing addresses
  • their corporate phone numbers and (where given)
  • their email addresses.

But the corporate world is filled with men (and a few women) who are highly skilled at moving up–by moving others out.  So keep in mind that the names provided below will not be permanent.

Check out the appropriate websites to obtain the latest information before writing that letter and/or making that call.

Too many airlines treat their passengers like captives of Vladimir Putin’s KGB

Send out a letter addressed “To Whom It May Concern” and you’ll instantly be branded as a lightweight.   This only shows that you were too lazy/stupid to find out who holds power in the organization.

Whereas a well-written letter addressed to the key decision maker will instantly warn top executives: “Take this person seriously.”

Now, the airlines:

DELTA AIRLINES

Richard H. Anderson – Chief Executive Officer

Edward H. Bastian – President

Email:   Email us

Phone: (404) 715-2600

Mail:

Delta Air Lines, Inc.
1030 Delta Blvd.
Atlanta, Georgia 30354

Click here: Delta Air Lines Newsroom – Leadership

AMERICAN AIRLINES

William Douglas ParkerChairman, President and Chief Executive Officer, AMR Corporation / American Airlines Group, Inc., Fort Worth, Texas.

John W. Bachmann – Senior Partner, Edward Jones, St. Louis, Missouri.

Mail:

P.O. Box 619616
DFW Airport, TX 75261-9616

Phone: (817) 963-1234

Click here: American Airlines Board of Directors

UNITED AIRLINES

Jeffery A. Smisek – Chairman, President and Chief Executive Officer, United Continental Holdings, Inc.

Oscar Munoz – Executive Vice President and Chief Financial Officer, CSX Corporation

Shareholders and other interested parties may contact the United Continental Holdings, Inc. Board of Directors as a whole, or any individual member, by one of the following means:

  1. writing to the Board of Directors, United Continental Holdings, Inc., c/o the Corporate Secretary’s Office, HDQLD, 77 W. Wacker Drive, Chicago, IL 60601; or
  2. by emailing the Board of Directors at UALBoard@united.com

If neither of these methods seems to work, try these:

Mail:
P.O. Box 66100
Chicago, IL 60666

Phone (general): (800) (800) 864-8331

Phone Investor Relations: (312) 997-8610

United Continental Holdings, Inc. – Investor Relations – Board of Directors

JETBLUE AIRWAYS

Joel C. Peterson – Independent Chairman of the Board of Jetblue Airways Corporation.

David Barger – President, Chief Executive Officer, Director of JetBlue Airways Corporation.

Mark D. Powers – Chief Financial Officer, Executive Vice President, Treasurer of JetBlue Airways Corporation.

JetBlue Airways Corporation Corporate Office | Headquarters
118-29 Queens Blvd.
Forest Hills, NY 11375
Phone:  (718) 286-7900
Toll Free: (800) 538-2583

http://www.jetblue.com

AIRTRAN

AirTran Airways is a wholly-owned subsidiary of Southwest Airlines.  Thus, complaints against Airtran should be directed to the top executives of Southwest.

SOUTHWEST AIRLINES

Gary C. Kelly – Chief Executive Officer and Chairman of Southwest Airlines, the parent company for AirTran

Douglas H. Brooks – Chairman of the Board, President and Chief Executive Officer
Southwest Airlines Corporate Headquarters
Physical Address:
Southwest Airlines
2702 Love Field Drive
Dallas, Texas 75235
Telephone: (214) 792-4223

Click here: Southwest Airlines Investor Relations – Board of Directors

US AIRWAYS

Robert Isom – Chief Executive Officer

Bruce Lakefield – Vice Chairman of the Board, President, CEO

Derek Kerr – Chief Financial Officer, Executive Vice President

Corporate Contact Information:

Mailing address:

US Airways
4000 E. Sky Harbor Blvd.
Phoenix, AZ 85034

Corporate headquarters:

111 W. Rio Salado Parkway
Tempe, AZ 85281

Phone: (480) 693-0800  7 AM – 5 PM Monday – Friday

Daniel E. Cravens
Director,
Investor Relations
US Airways
111 West Rio Salado Parkway
Tempe, AZ 85281

Phone: 480.693.1227

E-mail: Click here: US Airways | Compliments/complaints

Click here: US Airways | Investor relations

ALASKA AIRLINES

William S. Ayer – Chairman

Bradley D. Tilden – President and CEO

Brandon Pederson – Chief Financial Officer

Corporate Offices:

P.O. Box 68900
Seattle, WA 98168

Phone: (206-433-3200

Click here: Executive Leadership – Alaska Airlines

CONTINENTAL AIRLINES

In 2010, Continental Airlines merged with United Airlines.  Direct all inquiries and complaints to United Airlines, whose corporate information is given above.