The Federal Trade Commission (FTC) has released its Privacy & Data Security Update: 2017. The report is organized by major privacy enforcement actions in 2017, data security enforcement in 2017, and other topics of significant concern such as fair credit reporting, children’s online privacy and do not call. Apart from the Lenovo, Uber, and D-Link…
Category: Commentaries and Analyses
Aetna Customers Get $17 Million In HIV Privacy settlement
WTVA reports: After thousands of customers’ HIV statuses were revealed in mailings last year, a federal class-action lawsuit against health care company Aetna has reached a $17 million settlement. The lawsuit was filed in August after some 12,000 Aetna customers nationwide received letters mailed in July that accidentally revealed their HIV status through the windows…
China’s cyber watchdog scolds Ant Financial over user privacy breach
Reuters reports: Jan. 10 – China’s cyber watchdog has scolded Ant Financial, Alibaba’s payment affiliate, for compromising user privacy after many users of its Alipay service were automatically enrolled in its credit scoring system. The Cyberspace Administration of China (CAC) said in a statement it had summoned Ant Financial representatives to a meeting last Saturday…
Cybersecurity firm, cybersecure thyself?
Cue Peter, Paul, and Mary singing, “When will they ever learn? Oh, when will they ever learn? Oh, when will they ever learn?” The best place to store your private keys of your production environment is probably NOT a public Amazon AWS S3 bucket. This is a top 500 “Cybersecurity” company btw. 🙂 pic.twitter.com/8Vu7mGpwox —…
FBI Is Disrupting 10X Fewer Cyber Crime Rings Than In 2015
Joseph Marks reports: FBI agents took down or disrupted only about one-tenth as many cyber criminal operations during the 2017 fiscal year as they did three years earlier, according to annual reports. The number of cyber crime operations that FBI agents dismantled or disrupted fell from nearly 2,500 in fiscal year 2014, the first year…
Inside Uber’s $100,000 Payment to a Hacker, and the Fallout
Nicole Perlroth and Mike Isaac report: “Hello Joe,” read the November 2016 email from someone identifying himself as “John Doughs.” “I have found a major vulnerability in Uber.” The email appeared to be no different from other messages that Joe Sullivan, Uber’s chief security officer, and his team routinely received through the company’s “bug bounty”…