Gaurav Shukla writes: In what could be termed as a massive security breach, three Android apps offered by developer DMobileAndroid were found to be inadvertently sharing thousands of private photos and documents online. The apps offered by the developer are XGimp, MaxiPDF and Docswork, each of which has been downloaded anywhere between 100,000 and 500,000…
Category: Exposure
‘Panty Buster’ Toy Left Private Sex Lives Of 50,000 Exposed
Thomas Fox-Brewster reports: Valentine’s Day is just around the corner. Some might be considering the purchase of a special kind of pleasure-giving device for their partner as a gift. But they might want to rethink those plans: the quality of cybersecurity in newfangled, connected sex toys has been unsurprisingly shocking in recent years. And it doesn’t…
Top secret files found in locked file cabinet sold in second-hand shop
What’s possibly worse than leaving files with personally identifiable information in filing cabinets that you’re selling as surplus? How about leaving top secret and classified documents on the workings of five governments? Oh yeah, it happened in Australia.
Fire chiefs issue apology for privacy breach in Port Hills fire report
So often reports to the public fail to properly redact personal information. Here’s a case out of New Zealand: Fire chiefs have been forced to issue a shame-faced apology after releasing private, personal information in reports into last year’s Port Hills fires. Almost a year since the massive fires on Canterbury’s Port Hills above Christchurch,…
University of Baltimore exposed student identity information for more than three years: auditors (UPDATED)
Jan. 29 – please see update under this post. Meredith Cohn reports on a breach involving University of Baltimore student data: The University of Baltimore has added protections to personal student data that officials had left unsecured possibly for years, according to a state audit released this month. The information on 117,793 students was kept…
San Diego County Office of Education notifies component school districts of breach of employee retirement contribution data
The San Diego County Office of Education recently notified component districts that some employee retirement contribution data had been incorrectly shared with districts. From their notification: What Happened? On December 5, 2017, a San Diego County Office of Education (“SDCOE”) employee inadvertently sent an employee retirement contribution spreadsheet, containing employee name, Social Security number, and funding…