Lorenzo Franceschi-Bicchierai reports: An Android app with more than 10 million downloads left users’ selfies, pictures, audio messages, and other sensitive data exposed online for all to see. The app, called Drupe, was once named a “Google Play Editor’s Choice.” […] But its developers made a huge mistake. Until this week, Drupe users were unknowingly…
Category: Exposure
MO: Global University notifies students whose information was exposed by misconfigured database
From their press release: Global University (“Global”) is providing notice to current and former students of a recent event involving the potential exposure of certain personal information. To date, Global has not received any reports that the information has been misused. What Happened? On February 1, 2018, Global learned of the potential exposure of certain…
Halifax police won’t charge teen arrested in Nova Scotia privacy breach
CBC News reports: Halifax Regional Police say they won’t be charging a 19-year-old man arrested last month for downloading files from Nova Scotia’s freedom-of-information portal. Spokesperson Neera Ritcey said in an email Monday that after a thorough investigation, police determined there were no grounds to lay a charge of unauthorized use of a computer against the teen….
Vector’s legal action against Stuff for data leak could be settled
Stuff reports: Vector and Stuff may reach an agreement outside of court after some of Vector’s customer data was revealed as a result of a data breach. Last week, Stuff revealed that a glitch in an app designed by Vector meant the names, email addresses, physical location and phone numbers of customers who used the app were visible…
Ph: NPC orders Wendy’s PH to inform users affected by data breach
ABS-CBN reports: The National Privacy Commission (NPC) has ordered Wendy’s Philippines to notify users affected by the data breach on its website on April 23. The order dated May 2 was released after the fast food chain notified the commission that its website was infiltrated and that personal data of users were obtained and published…
Capital Digestive Care patient data exposed by vendor error
Sometimes by the time a notification appears on a state breach notification site, I’ve forgotten whether I ever reported it or not. Case in point: Capital Digestive Care in Maryland. I knew about it on February 22, and helped make the notification to them to get them to investigate it (it turned out to be…