The Auburn University breach involving the exposure of information just got worse, in my opinion. Erin Edgemon reports that some of the people who had their data exposed not only never attended Auburn, but never even applied there. Not surprisingly, they would like to know how Auburn got personal information about them that wound up exposed. But Auburn reportedly…
Category: Exposure
Equifax discloses data breach due to technical error during software change
Credit reporting giant Equifax is notifying some consumers that some of their personal information may have erroneously been sent to other individuals due to a technical error during a software change. Equifax discovered the problem on March 15, and notes that they attempted to call all recipients of the inadvertent disclosures to recover the files…
Franklin & Marshall to notify 356 students whose SSNs were exposed online for two years
There’s been another breach in the education sector, this one involving Franklin & Marshall College in Lancaster, PA. On March 19, F&M was notified that two Excel sheets with 356 students’ full names and Social Security numbers was exposed on the public portion of their eDisk network. The files were promptly removed. An investigation revealed…
Change.org springs a leak, exposes private e-mail addresses [updated]
Earlier this week, Dan Goodin reported: Online petitions service Change.org has a website bug that’s disclosing e-mail addresses that presumably belong to current or former subscribers. Search results suggest the number could be thousands, but a Change.org official said it was about 100. The disclosure bug was active at the time this post was being…
Horrific privacy breach by Tewksbury Public Schools
Cross-posted from PogoWasRight.org. Okay, this is really bad, on multiple levels. Brendan Foley and Jayne Miller report: Tewksbury Public Schools face angry parental backlash following the release of private student information online last week. A document included in a 222-page School Committee packet remained online for the better part of a week, before being taken…
CA: Email error exposes 845 Tulare County patients’ email addresses.
The Tulare County Health & Human Services Agency (HHSA) has announced a potential breach involving the protected health information of 845 patients seen at the Visalia and Farmersville clinics who use the online Patient Portal. The potential breach occurred on March 19, 2015, when an employee sent an email and neglected to encrypt and blind…