From the FTC: Following a public comment period, the Federal Trade Commission has approved final orders settling charges against three credit report resellers, SettlementOne Credit Corporation; ACRAnet, Inc.; and Fajilan and Associates, Inc., also doing business as Statewide Credit Services. The FTC alleged the companies did not take reasonable information security steps to protect consumers’…
Author: Dissent
New data spill shows risk of online health records – as if we needed yet another reminder?
Jordan Robertson of Associated Press reports: Until recently, medical files belonging to nearly 300,000 Californians sat unsecured on the Internet for the entire world to see. There were insurance forms, Social Security numbers and doctors’ notes. Among the files were summaries that spelled out, in painstaking detail, a trucker’s crushed fingers, a maintenance worker’s broken…
FI: Patient medical data on computer found in ditch
From YLE: A computer containing thousands of people’s private medical data was found in a ditch on a Turku motorway, according to the daily Turun Sanomat. The patients listed include politicians, businessmen and top athletes. The computer belongs to a private chiropractor, and the patient records and data were not password protected. The staff at…
Dialogic, Sikorsky, and Thompson Dunavant report recent breaches
A few recent breach reports to the New Hampshire Attorney that did not garner media attention: On August 8, California-based Dialogic, Inc. sent out notifications to employees whose names and Social Security Numbers were on equipment stolen during a break-in on July 17. Also on August 8, Sikorsky Aircraft Corporation (a subsidiary of United Technologies Corporation)…
Thirty-one Gifts, two breaches, and a bunch of notification letters
It must be headache-inducing enough to investigate one security breach. To discover a second breach while investigating the first, well, pass the Prozac. On August 8 , lawyers for Ohio-headquartered Thirty-One Gifts, LLC notified the New Hampshire Attorney General’s Office that while investigating how administrative credentials had been misappropriated and used to transfer some consultants’…
Epson Korea says 35 million 350,000 customers’ data hacked (updated)
Update: Yonhap News issued another story that puts the number at 350,000, but didn’t correct their original url, cited below. Good grief – yet another hack in South Korea affecting 35 million?! Yonhap News Agency reports: Epson Korea Co., the South Korean unit of Japan’s Seiko Epson Corp., said Saturday that its Web site has…