G. Wayne Miller reports: Blue Cross & Blue Shield of Rhode Island has disclosed a breach of personal health-care information affecting 1,567 people that the insurer blames on an unnamed vendor responsible for sending benefits explanations, also known as health-care services summaries, to members. In a media release Tuesday afternoon, the insurer said that some…
Category: Exposure
Mt. Diablo School District notifies parents of data breach
And while we mutter and grumble about #EdTech glomming up way too much personal and sensitive information on students, let’s not forget that good old-fashioned email errors are still causing problems. In today’s episode, the Mt. Diablo School District reports that an error on August 8 was caught after 200 of 650 emails were sent…
UK: Npower warns of breach that exposed personal details of 5,000 customers
Carly Page reports: Energy giant Npower has admitted that a security screw-up saw the personal details of some 5,000 customers shared via post. While there doesn’t appear to be a warning on the company’s website or social media channels, the BBC reports that Npower is “urgently investigating” the incident, which saw customers’ details shared in…
Cloud data management firm Veeam exposes 200GB of data on AWS instance
Duncan Riley reports: Cloud data management company Veeam Software Inc. is the latest of many companies to expose customer data via a misconfigured cloud instance, with 200 gigabytes of data relating to more than 440 million customer records found online. Detailed by security researcher Bob Diachenko, the leak of the data was discovered on a MongoDB database…
AZ: Files containing patient info left unsecured at TMC HealthCare property
Gloria Knott reports: More than a thousand paper files containing patient information were left unsecured during a 2-week time frame at a storage suite on TMC HealthCare property in July, a news release from TMC HealthCare says. TMC HealthCare is the umbrella organization that includes Tucson Medical Center and other offices. This particular incident did…
For 2nd Time in 3 Years, Mobile Spyware Maker mSpy Leaks Millions of Sensitive Records
Brian Krebs reports: mSpy, the makers of a software-as-a-service product that claims to help more than a million paying customers spy on the mobile devices of their kids and partners, has leaked millions of sensitive records online, including passwords, call logs, text messages, contacts, notes and location data secretly collected from phones running the stealthy…