Lisa Banks reports: The repeated hacking of Sony’s PlayStation Network hack has demonstrated the need for Australia to adopt mandatory data breach disclosure laws, a local security director has claimed. While the PlayStation Network was back up and running for Australian users today, director of Clearswift, Phil Vasic, said mandatory disclosure laws would help prevent…
Category: Commentaries and Analyses
Pointer: Are we blasé about breaches?
Dan Raywood quotes a number of security experts in an article on SC Magazine that poses the question as to whether consumers have become blasé about breaches.
AZ: Casa Grande court clerk hid, took home records
Yesterday I updated a breach report on phiprivacy.net where a hospital employee had taken records home… and taken records home… and taken records home. According to hospital investigators, there was no indication that she used them criminally or intended to use them criminally, but the incident points out how many paper records may just “wander”…
Pointer/reference: Chronology of recent Sony incidents
Great thanks to attrition.org for compiling a detailed chronology of recent Sony security incidents together to help us all.
Editorial: Let me make my own decisions, thankyouverymuch
The recent spate of hacks against Sony networks as well as a Congressional hearing where representatives of Sony and Epsilon testified about their recent breaches have stimulated another round of discussions about whether we need a federal breach disclosure law that preempts state laws, and if so, what the threshold or trigger should be for…
How the Epsilon Breach Hurts Consumers
Yesterday, following the Congressional hearing where Sony and Epsilon testified, we had a bit of a lively – if truncated – debate on Twitter about breach notification. Not surprisingly, George V. Hulme raised the issue of breach notice fatigue and how notifications should be confined to situations where there is some real risk. Also not…