Zurairi Ar reports: The Ministry of Education’s School Examination Analysis System (SAPS) was taken offline yesterday, following the discovery of a security exploit that could have potentially exposed the personal details of more than 10 million citizens. Malay Mail was alerted of the vulnerability on Friday evening by a reader, who insisted on remaining anonymous…
Month: June 2018
RISE Wisconsin Notifies Plan Participants of Data Security Incident
MADISON, WI – June 7, 2018 – RISE Wisconsin (“RISE”) (formerly Community Partnerships and Center for Families) has become aware of a data security incident that may have involved the limited protected health information of our participants. Although at this time there is no evidence of any attempted or actual misuse of anyone’s information as…
UK: Data leak fears raised over dumped Portsmouth City Council computers ‘that may have not been wiped’
Fiona Callingham reports: Portsmouth City Council could face hefty fines under General Data Protection Regulations after it was discovered that for the past two years contractors have not been obliged to erase data when removing old computer drives. Auditors revealed the discrepancy in a report that was discussed at today’s governance and audit and standards…
Phoenix Terros Health Notifies 1,600 Patients of Phishing Attack
Bridget Dowd reports: Terros Health reported a major data breach Friday, affecting about 1,600 patients. The Phoenix-based integrated care company helps patients with mental illness and addiction. The organization was notified in April that an unauthorized third party had gained access to an email account through a phishing scam. Karen Hoffman Tepper, chief operating officer, said…
Yahoo’s EU regulator orders privacy changes over data breach
Padraic Halpin reports: Yahoo’s European regulator has ordered it to make privacy changes following a probe into what it said was one of the largest ever data breaches to impact EU citizens. […] It ordered the internet company to take specified actions, including ensuring that all its data protection policies take account of the applicable…
Eleventh Circuit Vacates FTC Cybersecurity Order against LabMD
Attorneys at Ropes & Gray, the law firm representing LabMD in LabMD vs. FTC, write: On June 6, 2018, at the urging of Ropes & Gray, the U.S. Court of Appeals for the Eleventh Circuit vacated an order that the Federal Trade Commission (the “FTC”) had imposed on LabMD, Inc. (“LabMD”) to overhaul the cancer…