Tom Field of BankInfoSecurity.com has an interesting interview with Richard Coffman, the Texas attorney who filed the first class action lawsuit against Heartland Payment Systems (HPY). Coffman represents banks and financial institutions suing HPY. One of the more intriguing aspects of the interview has to do with why Coffman thinks that banks and financial institutions…
Category: Commentaries and Analyses
Audit of US DOE on Incidents
Parts of the report were redacted, indicated by x’s below. Executive Summary: The Office of Inspector General (OIG) performed a review of the Department of Education’s (Department) external web sites. This audit was conducted in accordance with the Federal Information Security Management Act (FISMA) as enacted by Title III of the E-Government Act of 2002,…
Analysis of Savvis’ Motion to Dismiss Lawsuit
David Navetta has written a clear and helpful analysis of Savvis’ motion to dismiss Merrick Bank’s lawsuit against Savvis, arising out of the CardSystems Solutions breach.
EPIC Urges Comprehensive Strategy for ID Theft
From EPIC.org: With ID theft rapidly increasing in the United States, EPIC Executive Director Marc Rotenberg urged a Congressional Committee to address the root causes of the problem. In a testimony before the House Oversight Committee, Mr. Rotenberg said that the government typically acts only after the crime has occurred and warned that the problem…
Pointer: Commentaries on Merrick Bank v. Savvis
Last week, people started talking about a lawsuit first filed last year by Merrick Bank against Savvis Inc. The basis for the suit is that when Savvis audited CardSystems Solutions for compliance with the CISP security standards of the time, they gave them a clean bill of health. Merrick sued them after the breach, and…
OIS Commentary: And some walls will come tumbling down
One of yesterday’s posts on PHIprivacy.net reports a data breach involving Kelsey-Seybold Clinic that has not been reported in the mainstream media. I contacted Kelsey-Seybold after a site visitor alerted me to the breach. The report is frustratingly short on details, though, because Kelsey-Seybold could — and did — simply ignore questions it did not…