From the ICO: Employees could face a criminal prosecution if they access or share personal data without a valid reason, the Information Commissioner’s Office has warned. The warning came after Birmingham Magistrates’ Court fined two workers in separate cases for breaching data protection laws. Faye Caughey, 32, of Ringswood Road, Solihull was employed at the…
Category: Insider
NC: Man accused of trying to extort former employer by releasing customers’ private information
WSOCTV reports: A man accused of trying to extort his former employer by threatening to release thousands of people’s personal and private information stood before a federal court judge for the first time Monday morning. The government said Matthew Moebius worked for a Statesville company for 13 years and had access to customers’ information. Court papers…
MI: High school students hack system to change grades, attendance
Justine Lofton reports: Students of Orchard View Schools hacked the district’s student information system and made changes to grades and attendance, according to a statement. The breach in PowerSchool appears to be isolated to Orchard View High School, Superintendent Jim Nielsen said on Wednesday, March 13. […] Parents of the “very small” group of students…
Hawkesbury hospital worker dismissed over privacy breach
CBC News reports: One employee at Hawkesbury General Hospital has been let go after personal information was improperly accessed, Radio-Canada has learned. Patients who had their information viewed were recently informed in a letter. Chantal Groleau, one of the people who received a letter, was told her personal information was viewed between March 2016 and October…
MA: Emerson Hospital reports data breach
Robert Mills reports, in relevant part: Emerson Hospital is offering a two-year membership to an identity protection service to 6,300 patients whose personal information was part of a data breach caused by a third-party vendor last year. In a statement released Friday, the hospital said the data breach occurred between May 9 and May 17…
Turkish Data Protection Authority Announced Data Leakage Of A Dutch Bank Revealing The Importance Of Effective Information Security
Ertuğrul Can Canbolat LL.M., S. İrem Akin and Baran Can Yildirim, LL.M. write: Under Article 12/5 of the Turkish Data Protection Law, the data controllers are obliged to inform the Turkish Data Protection Authority (“DPA“) in case the personal data processed on their behalf is acquired by others unlawfully. In line with this provision, ING…