A follow-up to an insider skimming breach noted here in August 2013. Shayna Jacobs reports: A former Chelsea Prêt a Manger employee who was behind the identity theft of over 100 of the eatery’s customers was sentenced to up to four years in prison Wednesday. Nigel McCollum, 23, previously pleaded guilty to identity theft, forgery,…
Category: U.S.
Solano County Dept. of Child Support Services letters lost by courier
The California Department of Child Support Services is notifying some individuals of an incident that occurred last month. From their notification letter: On April 7, 2014, several letters from the Solano County Department of Child Support Services were misplaced while in the custody of a contracted courier who was transporting mail to the US Post Office. Although…
In his words: How a whitehat hacked a university and became an FBI target
Sean Gallagher reports on the hack of U. Maryland that got a contractor’s former employee in hot water with the FBI: David Helkowski stood waiting outside a restaurant in Towson, Maryland, fresh from a visit to the unemployment office. Recently let go from his computer consulting job after engaging in some “freelance hacking” of a…
In wake of massive data breach, Target CEO steps down
In the wake of its massive data breach, Gregg Steinhafel, Chairman of the Target board of directors, president and CEO, steps down.
Oregon investigating complaints about the Archdiocese of Portland’s handling of ID theft
Brent Hunsberger reports: Oregon regulators are investigating whether the Archdiocese of Portland violated state law by failing to properly notify employees and volunteers that they could be victims of tax-return fraud. The Oregon Division of Finance and Corporate Securities has received two complaints from consumers about the Archdiocese, which oversees schools and parishes serving 418,000 Catholics in…
FTC told to disclose the data security standards it uses for data security enforcement actions
Jaikumar Vijayan reports: The Federal Trade Commission (FTC) can be compelled to disclose details of the data security standards it uses to pursue enforcement action against companies that suffer data breaches, the agency’s chief administrative law judge ruled Thursday. The decision came in response to a motion filed by LabMD, a now-defunct medical laboratory that…