From the Federal Trade Commission: Lenovo Inc., one of the world’s largest computer manufacturers, has agreed to settle charges by the Federal Trade Commission and 32 State Attorneys General that the company harmed consumers by pre-loading software on some laptops that compromised security protections in order to deliver ads to consumers. In its complaint, the…
Category: Business Sector
Customer data stolen after attack on jobs platform cpjobs.com
From HumanResources: Online jobs platform cpjobs.com has reported an unauthorised third-party attack on the website, compromising the security of user data. Impacted pages have been shut down and all users’ passwords have been deactivated. […] In an additional security notice on the website, the company reveals it has identified two attempts to attack the website…
Just smile: In KFC China store, diners have new way to pay
Reuters reports: Diners at a KFC store in the eastern Chinese city of Hangzhou will have a new way to pay for their meal. Just smile. Customers will be able to use a “Smile to Pay” facial recognition system at the tech-heavy, health-focused concept store, part of a drive by Yum China Holdings Inc to…
Edmonton Police Seize Fazny.ca For Stealing Users’ Card Data
Catalin Cimpanu reports: Canadian police have seized the domain of Fazny.ca, an online electronics store that stole users’ payment card data and used it to make fraudulent purchases. According to a statement from the Edmonton Police Service (EPS), its Cyber Crimes Investigation Unit started looking into the website after a user complained of fraudulent purchases…
Thousands of Security Firm Job Applications Citing Top Secret US Government Work Exposed on Misconfigured Amazon Server
Dell Cameron reports: Thousands of files containing the personal information and expertise of Americans with classified and up to Top Secret security clearances have been exposed by an unsecured Amazon server, potentially for most of the year. The files have been traced back to TigerSwan, a North Carolina-based private security firm. But in a statement…
FTC Settles GLBA Enforcement Action Against TaxSlayer Stemming From 2015 Data Breach
We haven’t seen many data security enforcement actions under the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule, but a recent case is a good opportunity to remind entities that they may be covered by it even if they didn’t know it. Edward McAndrew, Kim Phan, and Zaven Sargsian of Ballard Spahr write: The Federal Trade Commission (FTC)…