Larry Dignan reports: Equifax’s first quarter earnings report highlighted expenses due to its September 2017 data breach and how the spending is shifting more toward IT and security. In its first quarter earnings report, Equifax outlined that it spent $45.7 million for the three months ended March 31 on IT and data security. The company…
Category: Commentaries and Analyses
1 Million US Children Affected by Identity Theft Last Year, Infuriating Study Finds
Dell Cameron reports: It’s never too early to have your identity stolen, unfortunately. More than 1 million children in the United States were affected by identity theft last year, according to a new study highlighting what’s easily the most overlooked demographic impacted by breaches of personally identifiable information. The study, released Tuesday by Javelin Strategy…
Hackers built a ‘master key’ for millions of hotel rooms
Zack Whittaker reports: Security researchers have built a master key that exploits a design flaw in a popular and widely used hotel electronic lock system, allowing unfettered access to every room in the building. The electronic lock system, known as Vision by VingCard and built by Swedish lock manufacturer Assa Abloy, is used in more…
Altaba, Formerly Known as Yahoo!, Charged With Failing to Disclose Massive Cybersecurity Breach; Agrees To Pay $35 Million
From the SEC: The Securities and Exchange Commission today announced that the entity formerly known as Yahoo! Inc. has agreed to pay a $35 million penalty to settle charges that it misled investors by failing to disclose one of the world’s largest data breaches in which hackers stole personal data relating to hundreds of millions…
Seventh Circuit Affirms Dismissal of Schnuck Markets Data Breach Lawsuit
Ashley Miller writes: The United States Court of Appeals for the Seventh Circuit recently affirmed the dismissal of a putative class action brought by financial institutions against Schnuck Markets, Inc., following a data breach impacting Schnuck beginning late 2012. The plaintiffs attempted to assert claims of negligence, negligence per se, various contract claims, and violation…
CYBERSECURITY: DHS Needs to Enhance Efforts to Improve and Promote the Security of Federal and Private-Sector Networks
CYBERSECURITY: DHS Needs to Enhance Efforts to Improve and Promote the Security of Federal and Private-Sector Networks GAO-18-520T: Published: Apr 24, 2018. Publicly Released: Apr 24, 2018. VIEW REPORT (PDF, 22 PAGES) What GAO Found In recent years, the Department of Homeland Security (DHS) has acted to improve and promote the cybersecurity of federal and private-sector…