Lolita C. Baldor reports: The Pentagon on Friday said there has been a cyber breach of Defense Department travel records that compromised the personal information and credit card data of U.S. military and civilian personnel. According to a U.S. official familiar with the matter, the breach could have affected as many as 30,000 workers, but…
Month: October 2018
AU: School students’ private medical details leaked in Google sync privacy mess
Here’s what appears to be a serious breach involving Google drive and syncing. Henrietta Cook reports: Confidential files detailing high school students’ medical conditions, including anxiety issues and those at risk of suicide, have been found on a Melbourne schoolgirl’s iPad. The document contains photos, names and medical and family details of years 7 to 12…
Hackers accessed personal information of 30 million Facebook users
Donnie O’Sullivan reports: Almost 30 million Facebook users’ phone numbers and email addresses were accessed by hackers in the biggest security breach in the company’s history, Facebook said Friday. The attackers accessed even more details on 14 million of those users, including the area where they live, their relationship status, their religion, and part of…
MindBody-owned FitMetrix exposed millions of user records — thanks to servers without passwords
Zack Whittaker reports: FitMetrix, a fitness technology and performance tracking company owned by gym booking giant Mindbody, has exposed millions of user records because it left several of its servers without a password. The company builds fitness tracking software for gyms and group classes that displays heart rate and other fitness metric information for interactive…
$400K settlement reached in Capital Health patient privacy breach
Richard Woodbury reports: A proposed settlement worth about $400,000 has been reached in a Nova Scotia class-action lawsuit relating to the improper access of patients’s personal health information by an employee of the former Capital District Health Authority, according to a law firm involved in the case. The breaches by former employee Katharine Zinck Lawrence, who accessed the…
ID: Madison County held hostage by ransomware on Monday
Lisa Dayley Smith reports: Ransomware held Madison County hostage on Monday and continued through much of Thursday. The hacker demanded money to restore files and access, but Madison County officials declined to pay. Instead, officials turned to their IT specialists to fix the problem. County workers called in specialists on Monday – Columbus Day –…