From the Metropolitan Police: A fifth person has been arrested in connection with the investigation into alleged data theft from TalkTalk. On Tuesday, 24 November, detectives from the Metropolitan Police Service’s Cyber Crime Unit (MPCCU) and officers from Southern Wales Regional Organised Crime Unit executed a search warrant at an address in Llanelli, Wales. The…
Month: November 2015
Hilton Worldwide discloses malware-related payment card breach began in November, 2014 (Update2)
From a statement on their site today: Hilton Worldwide (NYSE: HLT) has identified and taken action to eradicate unauthorized malware that targeted payment card information in some point-of-sale systems. Hilton immediately launched an investigation and has further strengthened its systems. Hilton Worldwide worked closely with third-party forensics experts, law enforcement and payment card companies on…
FBI has lead in probe of 1.2 billion stolen Web credentials: documents
Nate Raymond reports: A hacker who once advertised having access to user account information for websites like Facebook and Twitter has been linked through a Russian email address to the theft of a record 1.2 billion Internet credentials, the FBI said in court documents. That hacker, known as “mr.grey,” was identified based on data from a…
OPM OIG Audit Finds Significant Problems Remain
From the Executive Summary of FY 2015 FISMA Results: The significant deficiency related to information security governance has been dropped due to the reorganization of the Office of the Chief Information Officer (OCIO). OPM’s system development life cycle policy is not enforced for all system development projects. OPM does not maintain a…
UK: Niall O’Kane eye patients alerted over lost records
Jade Edwards reports: A copy of patients’ records, which include names, addresses, national insurance numbers and bank account details, has been lost by an optometrist in Strood. The protected back-up copy of Niall O’Kane Optometrists’ patient database was left on a train on Saturday, October 10. Mr O’Kane wrote to patients explaining the situation. In…
Personal data of thousands of Jefferson Co. residents exists online
Eric Besson reports: As public anxiety persists over regular reports of major data breaches, Social Security numbers of up to thousands of current and former Jefferson County residents can be found online in electronic county records, increasing locals’ vulnerability to a costly and stressful ordeal. The issue lingers from an unresolved statewide privacy gap spotted almost a…