Jessica Davis reports: The Department of Defense Health Agency (DHA) failed to consistently implement security measures to protect the systems that stored, processed, and transmitted electronic health record and patient information, according to a DoD Office of Inspector General report released this week. The report found DHA and Army officials didn’t enforce the use of Common…
Category: Of Note
Massive Oklahoma Government Data Leak Exposes 7 Years of FBI Investigations
Thomas Brewster reports: Another day, another huge leak of government information. Last December, a whopping 3 terabytes of unprotected data from the Oklahoma Securities Commission was uncovered by Greg Pollock, a researcher with cybersecurity firm UpGuard. It amounted to millions of files, many on sensitive FBI investigations, all of which were left wide open on…
U.S. authorities charge several people in SEC hacking scheme
Jonathan Stempel reports: U.S. authorities on Tuesday charged several individuals and companies in a scheme to trade on information in nonpublic corporate press releases by hacking into a U.S. Securities and Exchange Commission database. In a filing with the U.S. District Court in Newark, New Jersey, the SEC said individuals in the United States, Russia…
Employees sacked, CEO fined in SingHealth security breach
Eileen Yu reports: Two employees have been sacked and five senior management executives, including the CEO, fined for their role in Singapore’s most serious security breach, which compromised personal data of 1.5 million SingHealth patients. Further enhancements also will be made to beef up the organisation’s cyber defence, in line with recommendations dished out by…
Chinese hackers, APT10, may have struck Keidanren system in 2016
Tatsuya Sudo reports: A Chinese group that has been accused by the U.S. government in a series of cybertheft cases around the world is now suspected in the 2016 hacking of the computer system used by Keidanren (Japan Business Federation). Keidanren officials announced in November 2016 that 23 computers used in the federation’s system had…
Directors and Officers Settle Over Yahoo Hack: A New Chapter in Derivative Litigation?
Craig A. Newman of Patterson Belknap writes: Yesterday, a Superior Court judge in Santa Clara, California approved what is believed to be the first monetary award to a company in a data breach-related derivative lawsuit. Until now, such breach-related derivative cases have settled through a combination of governance changes and modest awards of attorney’s fees. But…