Cyber criminals are aggressively sharing credentials to .edu e-mail accounts – including stolen accounts, fake e-mails, and older e-mail accounts. The Digital Citizens Alliance saw evidence showing threat actors of all types – including hacktivists, scam artists, and terrorists – putting credentials (e-mails and passwords) up for sale, trade, or, in some cases, just given…
Category: Commentaries and Analyses
Personally Identifiable Information Found on 40 Percent of Used Devices in Largest Study To-Date
The headline pretty much says it all. The study was conducted by an association with a self-serving interest, but here’s the press release: The National Association for Information Destruction (NAID ) announced today the results of the largest study to date of the presence of personally identifiable information (PII) on electronic devices sold on the…
Privilege Waiver: Is Your File-Sharing Site a Public Park Bench?
Lia Marie Brooks and Peter A. Nelson have an article on Harleysville Insurance Co. v. Holding Funeral Home, Inc. that I nearly skipped. I’m glad I didn’t, because it may have some applicability to cases where entities leave confidential or protected health information on public FTP servers without any password protection and then try to…
Protenus releases February health data breach statistics
So what kind of month was February for breaches in the healthcare sector? Protenus has released its February Breach Barometer based on incidents compiled by this site. As a reminder: their analyses do not rely solely on HHS’s public breach tool. As in past months, insider incidents – whether accidental or intentional wrongdoing – comprised…
AU: NSW hospital patients not told their medical records were found in public areas
Nick Dole reports on the lack of transparency and notification following breaches of health data in NSW: NSW hospital patients have had their confidential details compromised on multiple occasions, including medical records being found in a public carpark. Many of the most serious privacy breaches have been reported in the Central Coast Local Health District,…
FBI agent took down teen hacker by pretending to be a reporter – and media didn’t like that
Raphael Satter of AP reports: The young hacker was told in no uncertain terms: You are safe with me. “I am not trying to find out your true identity,” AP journalist Norm Weatherill assured the teenager in an online chat. “As a member of the Press, I would rather not know who you are as…