Almost one month ago, the UK’s ICO announced that fines for data breaches were “imminent.” Maybe “imminent” means something different in UK English than in New Yorkese, where we tend to be impatient, but nothing happened. Now Peter Judge of eWeek suggests that, for a variety of reasons, Google might make a good first target….
Category: Commentaries and Analyses
UK: Moving on from the 2007 data loss by HMRC
The loss in 2007 by Her Majesty’s Revenue and Customs of 25 million people’s details was a major warning to the public sector. Rob Buckley says that the private sector should also take heed. SC Magazine has a lengthy article reviewing the HMRC breach and its aftermath, with lessons learned and lessons to-be-learned by the private…
FinCEN report: Identity Theft Trends, Patterns, and Typologies Reported in Suspicious Activity Reports Filed by Depository Institutions January 1, 2003 – December 31, 2009
From the Financial Crimes Enforcement Network report, Identity Theft Trends, Patterns, and Typologies Reported in Suspicious Activity Reports Filed by Depository Institutions January 1, 2003 – December 31, 2009, the Executive Summary: Identity theft was the sixth most frequently reported characterization of suspicious activity within the period of the study, behind structuring/money laundering, check fraud, mortgage loan fraud,…
What’s the actual cost of a FACTA breach?
We’ve seen some impressive figures for the cost of data breaches, but what’s the cost of a FACTA breach? Has anyone seen any analysis of actual costs in resolved or settled cases? Back in May 2009, Olive Garden settled a class action lawsuit stemming from alleged violations of FACTA. Because receipts included more than…
Open slather for hackers on official databases
Brian Robins follows up on the NSW Auditor-General’s report, released yesterday: Computer hackers could gain access to personal information held in government databases as state departments routinely ignore government edicts that tighter security be imposed. The government rarely discloses when its computer security systems have been breached, although in a report yesterday, the NSW Auditor-General,…
NSW govt can’t ensure privacy: Aud-Gen
AAP reports: The NSW Auditor-General has called on the state government to rethink its electronic data security, saying it has failed to adequately protect the people’s private information. Despite a 2007 edict that all government agencies comply with international electronic security standards, Auditor-General Peter Achterstraat has found people’s information is still at risk of being…