So far, I’m not seeing much coverage of the Heartbleed bug and the security of patient information, although the Heartbleed crypto bug may be the biggest security news/threat of the year. Chris Wiltz writes: A bug has been discovered by security solutions provider Codenomicon Defensics and Google Security that would allow hackers to access a…
Month: April 2014
Update to VALIC databreach
Gene Valicenti has an update on the VALIC databreach reported previously on this blog. The breach generated a number of questions, including why it took so long for the life insurance and retirement plan firm to figure out what happened and why it took so long for them to determine who needed to be notified…
Critical crypto bug, Heartbleed, exposes Yahoo Mail, other passwords Russian roulette-style
Kudos to Dan Goodin for trying to help the public understand the significance of Heartbleed: Lest readers think “catastrophic” is too exaggerated a description for the critical defect affecting an estimated two-thirds of the Internet’s Web servers, consider this: at the moment this article was being prepared, the so-called Heartbleed bug was exposing end-user passwords, the…
Canada Revenue Agency shuts down web services over Heartbleed
OTTAWA – The Canada Revenue Agency says it has temporarily cut off public access to its electronic services over security concerns. The agency says it shut down access to protect the security of taxpayer information. Read more on The Spec. The full text of the statement on CRA’s web site: Statement from the Canada Revenue…
Iowa, North Carolina join states studying Experian breach – Reuters
Jim Finkle and Karen Freifeld of Reuters also have more on the Court Ventures/U.S. Info Search that has put millions of consumers at risk of identity theft or financial fraud: Iowa and North Carolina said they are looking into a breach involving a subsidiary of Experian Plc that exposed some 200 million social security numbers,…
Ca: Inform customers of data breach or pay $100,000 per case: new privacy bill
Candice So reports: Businesses and organizations will be formally required to tell individual customers and the Privacy Commissioner of Canada if they’ve suffered a data breach – or pay up to $100,000 in fines for every individual not told, according to the new Digital Privacy Act, or Bill S-4, tabled in the Senate today. Read more on ITbusiness.ca