Lorenzo Franceschi-Bicchierai has an update on a recent story: A company that sells cellphone spyware to consumers left 95,000 images and more than 25,000 audio recordings on a server accessible to anyone on the internet for weeks. The sensitive data was so easy to access, that Motherboard couldn’t even name the spyware company in its…
Category: Exposure
Butler County employee suspended after emailing spreadsheet with personal information
Denise G. Callahan reports: The Butler County commissioners approved a two-day, unpaid suspension for an employee who inadvertently sent out an email with wellness information regarding the county’s health insurance, which might have violated HIPAA laws. Shawna Smith, the county’s wellness coordinator, sent out an email in September with a spreadsheet that included hidden columns…
Kanopy privacy breach reveals which movies members have been streaming
On March 22, Simon Cohen reported: Free movie streaming site Kanopy has suffered a significant data leak, according to security researcher Justin Paine. Due to an unprotected web log database, which could be publicly accessed without authentication of any kind, Paine believes that the company has been leaking “roughly 26-40 million log lines per day beginning…
A family tracking app was leaking real-time location data
Zack Whittaker reports: A popular family tracking app was leaking the real-time locations of more than 238,000 users for weeks after the developer left a server exposed without a password. The app, Family Locator, built by Australia-based software house React Apps, allows families to track each other in real-time, such as spouses or parents wanting…
Privacy body probes ‘gaps’ in FOI website interface after data leak
ABS-CBN reports: The National Privacy Commission (NPC) is looking into “gaps” in the interface of the government’s Freedom of Information website that may have caused the leak of data on users who requested documents from the website, one of the agency’s commissioners said Saturday. Columnist Wilson Chua earlier said the ID he used on government…
FEMA exposed personal information of 2.3 million disaster victims
Caroline Linton reports: FEMA mistakenly exposed personal information, including addresses and bank account information, of 2.3 million disaster victims, the Department of Homeland Security’s Office of Inspector General said in a report released Friday. The breach occurred because FEMA did not ensure a private contractor only received information it required to perform its official duties, the report said….