Curiouser and curiouser. TripAdvisor.com reported a breach on March 24. At the time, some sources suggested it was a SQL injection, although I mentioned that there was some possibility it was due to a breach at an email service provider. Now TripAdvisor.com has sent out notices that they have been affected by the Epsilon breach….
Category: Breach Incidents
Have you gotten a phishing phone call after the Epsilon breach? (updated)
I received the following email from a blog reader this morning: FYI I have received 3 phishing emails in the last 12 hours including emails purportedly from Charter, Walgreens, and Citibank; of special interest however is the fact that I received a phone call on my home phone and the ID listed the caller as…
WV: Identity theft plagues Kanawha Valley
Jared Hunt reports from West Virginia: Federal officials are investigating an identity theft scheme that has been draining the bank accounts of Kanawha Valley residents in recent weeks. Officials are urging residents to vigilantly check their credit and bank statements to make sure they haven’t been hit by this latest scheme. Ron Layton, resident agent…
What should the headline on the Epsilon breach be?
By now, there have been thousands of news stories on the security breach at Epsilon, a Dallas-based email marketing service provider. Many of the headlines have incorporated the names of some of the firm’s biggest clients like Chase, Target, or Kroger. Many of the headlines have seemingly tried to frighten consumers into reading the story…
UK: Council printer mix up breached data protection laws
Probably everyone has accidentally left some papers in a shared printer at one time or another. But when papers containing sensitive personal data get scooped and included in a mailing to an uninvolved their party, you may wind up violating the Data Protection Act. According to the Information Commissioner’s Office, that’s pretty much what happened…
Applied Micro Circuits math: Laptop with unencrypted SSN + car = Breach notifications
Applied Micro Circuits Corporation recently notified some of its current and former employees that a laptop with their names and Social Security Numbers was stolen from an employee’s car. In a letter to those affected dated March 23, the technology firm indicated that the theft occurred on February 23. In one of the oddest things…