Catalin Cimpanu reports: If you’re a cryptocurrency startup, would you face a huge backlash by hacking your own customers to keep their funds safe if you know that a hacker is about to launch an attack and steal their funds? This is exactly what happened yesterday when the Komodo Platform learned about a backdoor in…
Category: Breach Incidents
Aetna first notifying 238 Virginia employees of BenefitMall breach that they’ve known about since December, 2018?
In January, 2019, we learned about a breach at Centerstone Insurance and Financial Services, Inc. d/b/a BenefitMall, a business associate. The breach reportedly affected more than 111,000 insurance members/covered employees of the vendor’s clients. HIPAA Journal covered the incident. Yesterday, Aetna issued a public notice related to the incident. Surprisingly, their notice discloses that by…
NY: Broome County security breach put employees’ and clients’ personal information at risk
Katie Sullivan Borrelli reports: Broome County says an unauthorized individual may have had access to the personal information of county employees and individuals who receive the county’s care, including their Social Security numbers, medical records and bank account information. In a news release sent on its behalf by Mullen Coughlin LLC, of Wayne, Pennsylvania, the…
Lewes Public Works customers may have had their information stolen
Rob Sussman reports: The Lewes Board of Public Works announced to customers this week that their information may have been compromised as part of a hacking attempt of their customer information system. Here’s the full statement sent to customers: “May 29, 2019 Dear Customer, We are writing to you because of a potential threat to…
Major Hotel Management Company Leaks 85GB Of Security Log Data
Shane McGlaun reports: Another significant hack has happened, and this one is a hack of a hotel management company that backs some of the largest hotel chains in the world. The hotel management company in question is Pyramid Hotel Group, and it manages many Marriott locations. The company had a server that left an unsecured…
It’s been a strange week, Part 1. (Updates on the Cohen, Bergman, Klepper incident and the Total Registration incident)
The other day, Joseph Lorenzo Hall, PhD commented on Twitter about how doing notifications of breaches or leaks is a pretty thankless job. And it often is. Yesterday and today, however, I feel pretty good about the time I spent trying to make two notifications. The first “it was worth it afterall” experience involved a…