The UpGuard Cyber Risk team can now disclose that sensitive documents for over a hundred manufacturing companies were exposed on a publicly accessible server belonging to Level One Robotics, “an engineering service provider specialized in automation process and assembly for OEMs [original equipment manufacturers], Tier 1 automotive suppliers as well as our end users.” Among…
Category: Exposure
New England Dermatology creates new protocol after improper patient records disposal
Amy Phillips reports: New England Dermatology, P.C., d/b/a New England Dermatology and Laser Center (“NEDLC”), is reporting that paper records containing health information of patients who were seen at their Northampton office during a period from approximately June 10, 2013 to May 23, 2018 were discarded without first being shredded. NEDLC self-reported the lapse in appropriate waste…
Robocall Firm Exposes Hundreds of Thousands of US Voters’ Records
Catalin Cimpanu reports: RoboCent, a Virginia Beach-based political robocall firm, has exposed the personal details of hundreds of thousands of US voters, according to the findings of a security researcher who stumbled upon the company’s database online. The researcher, Bob Diachenko of Kromtech Security, says he discovered the data using a recently launched online service…
UK: Independent Inquiry into Child Sexual Abuse fined £200,000 for revealing identities of possible abuse victims in mass email
From the Information Commissioner’s Office, this press release: The Independent Inquiry into Child Sexual Abuse (IICSA) has been fined £200,000 by the Information Commissioner’s Office(ICO) after sending a bulk email that identified possible victims of non-recent child sexual abuse. The Inquiry, set up in 2014 to investigate the extent to which institutions failed to protect…
Telefonica breach exposes personal data of ‘millions’ of customers
Carly Page reports: Spanish operator Telefonica has suffered a security breach that exposed the personal data of millions of customers. The breach allowed anyone to access the billing data of other customers, according to a report at El Espanol, which noted that the incident is similar to a serious failure that hit Spain’s system in July…
In: Andhra Pradesh website is leaking detailed data of farmers
Trisha Jalan reports: The Andhra Pradesh government has been leaking the personal data of more than 23,000 farmers who have received subsidies from the Andhra Pradesh Medicinal and Aromatic Plants Board, reported HuffPost India. The organisation encourages the growth of Ayurvedic medicines in the state; the subsidies are offered to farmers and tribals – and…