Axway issued a press release with some interesting statistics on complaints made to the Information Commissioner Office (ICO). They obtained the data under Freedom of Information requests. Here are some of the statistics they compiled: Since April 2010, 35% of complaints to the ICO involved disclosure of personal data and security breaches. This year alone, the…
Category: Commentaries and Analyses
Report: Some cloud providers have ‘dirty disks’
Brandon Butler reports: A forensic IT study by a U.K. security consultancy found that some multi-tenant public cloud providers have “dirty disks” that are not fully wiped clean after each use by a customer, leaving potentially sensitive data exposed to other users. Last year, officials at Context Information Security conducted a study to determine if…
Watchdog defends apparent discrepancies in fines for private and public sector data breaches
The UK’s data protection watchdog has defended its policy of issuing fines after newly released figures suggested private sector organisations are issued with disproportionately fewer fines than local Government ones. Read more on Out-Law.com.
UK: Insecure websites to be named and shamed after checks
Mark Ward reports: Companies that do not do enough to keep their websites secure are to be named and shamed to help improve security. The list of good and bad sites will be published regularly by the non-profit Trustworthy Internet Movement (TIM). A survey carried out to launch the group found that more than 52%…
NAFCU Letter to Reps. Boehner and Pelosi on Cyber/Data Security
Via CUInsight, a letter that has some recommendations many readers might agree with: April 23, 2012 The Honorable John Boehner Speaker U.S. House of Representatives Washington, D.C. 20515 The Honorable Nancy Pelosi Minority Leader U.S. House of Representatives Washington, D.C. 20515 Re: Cyber Security and Data Security Dear Speaker Boehner and Minority Leader Pelosi:\ On…
Massachusetts: state of the breach reports, 2011
Massachusetts has provided another update/report on data breach notifications they receive. You can access the full report (pdf) on their web site. Here are a few snippets from the report: Since the Data Security law, c. 93H, went into effect, the Office of Consumer Affairs and Business Regulation has tracked the data breach notifications it…