Katie Sullivan Borrelli reports: Broome County says an unauthorized individual may have had access to the personal information of county employees and individuals who receive the county’s care, including their Social Security numbers, medical records and bank account information. In a news release sent on its behalf by Mullen Coughlin LLC, of Wayne, Pennsylvania, the…
Category: Breach Incidents
Lewes Public Works customers may have had their information stolen
Rob Sussman reports: The Lewes Board of Public Works announced to customers this week that their information may have been compromised as part of a hacking attempt of their customer information system. Here’s the full statement sent to customers: “May 29, 2019 Dear Customer, We are writing to you because of a potential threat to…
Major Hotel Management Company Leaks 85GB Of Security Log Data
Shane McGlaun reports: Another significant hack has happened, and this one is a hack of a hotel management company that backs some of the largest hotel chains in the world. The hotel management company in question is Pyramid Hotel Group, and it manages many Marriott locations. The company had a server that left an unsecured…
It’s been a strange week, Part 1. (Updates on the Cohen, Bergman, Klepper incident and the Total Registration incident)
The other day, Joseph Lorenzo Hall, PhD commented on Twitter about how doing notifications of breaches or leaks is a pretty thankless job. And it often is. Yesterday and today, however, I feel pretty good about the time I spent trying to make two notifications. The first “it was worth it afterall” experience involved a…
After threatening lawsuit, Shafer now says she did not intend to sue Paterson Times for exposing data breach
Jayed Rahman of the Paterson Times is likely loving work these days, with the Paterson schools giving the paper — and the reporter — lots of imprudent statements to report on. In today’s installment, it sounds like the district’s superintendent is walking back a perceived threat to sue the paper for basically committing journalism. After…
The Total Registration incident– Comments from the K-12 Cybersecurity Resource Center
Doug Levin has a write-up on the Total Registration data security incident first reported by this site. Doug raises a number of important issues and comments, and I hope his commentary gets wider coverage and discussion. I’m still mulling over the fact that a few of the school districts that this site attempted to notify…