Todd Feuer reports: Some people might have had their names and medical information exposed on a Chicago Department of Public Health online dashboard last fall, city officials said. On Oct. 8, 2024, the department learned about an “inadvertent potential disclosure of sensitive information used to generate statistics related to public health and safety,” CDPH officials…
Category: Exposure
Attorney General James Secures $450,000 from Companies Selling Home Security Cameras that Failed to Secure Private Videos
NYS Attorney General has been the most active state attorney general in terms of going after entities that don’t secure data properly. The following is from her latest press release: NEW YORK – New York Attorney General Letitia James secured $450,000 from three companies that distribute eufy home security video cameras for failing to secure consumers’…
Hong Kong privacy watchdog warns URA over leaked details of 199 tenants, owners
Jess Ma reports: Hong Kong’s privacy watchdog has served a warning letter to the Urban Renewal Authority (URA) over its failure to prevent a leak of the personal details of 199 tenants and owners stored on a cloud platform. The Office of the Privacy Commissioner for Personal Data issued an investigation report on Thursday and…
Khalil Center’s impressively rapid incident response
HHS’s public breach tool added a listing today that was submitted by the Khalil Foundation (DBA Khalil Center). The center describes itself as a psychological and spiritual community wellness center advancing the professional practice of psychology rooted in Islamic principles. They are covered by HIPAA. On December 22, they notified HHS that 1153 individuals had…
No need to hack when it’s leaking: Roomster edition (1)
There are leaks and then there are leaks. Hundreds of thousands of people who shared houses via Roomster might want to say a mental “Thank you” to the researcher known as @JayeLTee, who discovered a long-standing data leak and took steps to get it secured. As JayeLTee relates, he first spotted the misconfigured server in…
Massive VW Group Data Leak Exposed 800,000 EV Owners’ Movements, From Homes To Brothels
Thanos Pappas reports: Many people worry about hackers stealing their personal data, but sometimes, the worst breaches come not from shadowy cybercriminals but straight from the companies we trust. According to a new report from Germany, the VW Group stored sensitive information for 800,000 electric vehicles from various brands on a poorly secured Amazon cloud—essentially leaving…