Kevin Poulsen reports: Two Ukrainian men used online quizzes to lure more than 60,000 Facebook users into installing malicious browser extensions that exfiltrated their profile data and friends lists to offshore servers, according a federal lawsuit the company filed late Friday. The men, Andrey Gorbachov and Gleb Sluchevsky, allegedly used the browser extensions to overlay…
Month: March 2019
Licensed Producer under scrutiny for possible privacy breach of patient info
Emma Spears reports: Reports are surfacing that Canadian licensed producer RedeCan is facing a privacy breach after a mass email to patients revealed their personal information to other patients. Although officials from RedeCan have not commented publicly, an email from the LP to a patient impacted by the breach indicates the company has self-reported the…
MA: Release of employees’ partial Social Security numbers troubles Worcester teachers, School Committee members
Scott O’Connell reports: Teachers and School Committee members are looking for answers from the School Department in the wake of the district’s release of personal information for thousands of school employees to a testing company last year. According to Worcester Superintendent Maureen Binienda, the district’s IT department opted to use the last four digits of…
Names, banking information accidentally shared in emails to University of Waterloo students
CBC News reports: Personal information including names, student numbers, addresses and banking information of some University of Waterloo students was accidentally sent to a mailing list of 2,000 students, the school says. The emails went out Wednesday evening. Of the emails sent to the mailing list, 15 contained some private information like names and student numbers,…
UK: Gateshead Council data breaches share health and debt details
BBC reports: A council has admitted a series of data breaches, including uploading personal medical details to an online forum. Gateshead Council also sent letters containing private information to the wrong addresses and sent a debtor a list of other people who owed it money. The 19 breaches happened in the ten months after new…
MA: Emerson Hospital reports data breach
Robert Mills reports, in relevant part: Emerson Hospital is offering a two-year membership to an identity protection service to 6,300 patients whose personal information was part of a data breach caused by a third-party vendor last year. In a statement released Friday, the hospital said the data breach occurred between May 9 and May 17…