Yvonne T. Betowt reports: University of Alabama fans who bought items from Bamastuff.com between Aug. 1, 2009, and Jan. 16, 2012, are being alerted to contact their banks for possible illegal and unauthorized use of their credit cards. Bamastuff.com has sent out email notifications informing customers about a breach in its database, which was discovered…
Category: Business Sector
(Update) Attorneys General Seek Info about Zappos breach
Concerned about a recent hacking attack that may have affected more than 24 million customers, Attorney General George Jepsen, with support from nine other states, has asked Zappos.com, Inc. about its efforts to protect private customer information and its response to the breach. The Attorney General wrote to the chief executive officer of the on-line…
(Follow-up) Agreement Reached With Metropolitan Life Insurance Co. Over Release of Some Customers’ Personally Identifiable Information
Attorney General George Jepsen and Consumer Protection Commissioner William Rubenstein have reached an agreement with Metropolitan Life Insurance Co. to provide additional protections to the current and former customers whose personal information was made public. Information of current and former MetLife customers was part of a spreadsheet posted to the Internet by an employee of…
Customer data breach draws federal lawsuit against Nevada-based Zappos, parent company Amazon
Associated Press reports: Online retailers Amazon.com and Zappos.com are being sued in Kentucky by a Texas woman alleging that she and millions of other customers were harmed by the release of personal account information. […] Attorneys for plaintiff Theresa D. Stevens of Beaumont, Texas, are seeking class-action status on behalf of 24 million customers for…
Follow-up: Chartered Institute of Public Relations signs undertaking after membership applications lost on train
As a follow-up to a breach reported previously on this blog, the Chartered Institute of Public Relations has signed an undertaking with the Information Commissioner’s Office. From the undertaking: In May 2011, the Information Commissioner (the “Commissioner”) became aware of an incident involving the loss of up to 30 CIPR membership application forms. A member…
UK: Manpower UK Ltd e-mail gaffe results in undertaking for violating the Data Protection Act
An undertaking has been signed by Manpower UK Ltd following a breach of the Data Protection Act where a spreadsheet containing 400 people’s personal details was accidentally emailed to 60 employees. Although no date is given for the breach, the undertaking indicates: The Information Commissioner (the ‘Commissioner’) was provided with a report indicating that one…