If you follow me on Twitter (@pogowasright) or follow @datalossdb, you’ll know that over the past few months, I’ve started just sending some items directly into the database without reporting them on this blog. A few nights ago, I added a bunch to the database – some of which I tweeted – after discovering that…
Category: Business Sector
Cigna to notify some insured that employee e-mailed their names and SSN home
Now that California is posting breach notes on its site, I’m finding out about a slew of breaches that I did not find through other sources. Of the 27 breaches they’ve posted since the beginning of this year, I didn’t know about 16 of them: They’ve now all been entered in DataLossDB.org. One just added…
UK: Web exposure breach at Toshiba last summer revealed … today?
Toshiba Information Systems (UK) have breached the Data Protection Act (DPA) after the personal details of 20 competition entrants were compromised by a security flaw on their website, the Information Commissioner’s Office (ICO) said today. The ICO was informed by a member of the public in September last year that the personal details of individuals…
Why MilitarySingles.com’s denial of breach fails to convince me (updated)
Some breach reports really bother me. The MilitarySingles.com situation is a case in point. Despite their denial of any breach, what I saw in the two data dumps leaves me with the nagging suspicion that they were hacked. And so I contacted them again almost two weeks ago, following their last statement, to ask to…
UPDATE: Statement from ESingles about MilitarySingles.com
Today, a spokesperson for ESingles provided an update to the MilitarySingles.com breach report. Their statement is as follows: After a thorough investigation by our company programmers, it is our conclusion that our database was not hacked and that the claims of the Lulzsec group are completely false. Here are a couple points to note: 1….
FTC releases proposed settlement order in RockYou breach; $250k fine for breaching COPPA
The RockYou breach, disclosed in December 2009, stands as the 10th largest breach on DataLossDB’s counter after 32 million login credentials were compromised. A civil suit, Claridge v. RockYou, is still unsettled, although a proposed settlement was submitted to the court in November 2011. Previous coverage on this breach can be found here. Now the FTC…