Attorney General George Jepsen joined 14 other state attorneys general today in announcing a $1 million data breach settlement with the software and technology company Adobe Systems, Inc. The settlement resolves an investigation into the 2013 breach of certain Adobe servers, including servers containing the personal information of approximately 552,000 residents of the participating states. Connecticut…
Category: Of Note
IN: Madison County pays ransom on advice of insurer
Well, this is interesting: a media report says that a county’s insurer advised them to pay a ransomware demand. Ken de la Bastide reports: On the advice of their insurance company Madison County officials are moving forward to pay the ransom demands by a unknown group that attacked the county’s computer system. Madison County was…
Yahoo hack: Yahoo said its employees knew about the hack in 2014
ITPro reports: In a securities filing on Wednesday, Yahoo said some of its employees knew that a “state-sponsored actor” had broken into its network two years ago. This was the attack that led to theft of data such as names, dates of birth and passwords associated with more than 500 (sic) accounts. It’s considered to be one…
UK: TLT v SoS: How do you quantify damages for data breaches?
Cynthia O’Donoghue and Chantelle Taylor write: A recent High Court decision, TLT and others v Secretary of State for the Home Office [2016] EWHC 2217 (QB) (“TLT v SoS”), paves the way for the greater recognition of distress in cases of data breaches and the misuse of private information. The victims of a data breach, in this case asylum…
Microsoft Says Russian Hackers Exploited Flaw in Windows
Jay Greene and Robert McMillan report: The hackers believed responsible for breaking into computers at the Democratic National Committee have exploited previously undisclosed flaws in Microsoft Corp.’s Windows operating system and Adobe Systems Inc.’s Flash software, Microsoft said Tuesday. It is unclear if those hackers, reportedly tied to Russia, used the newly disclosed vulnerabilities to hack into the…
FTC Issues Guidance for Responding to Data Breaches
Caleb Skeath writes: On Tuesday, the FTC issued new guidance for businesses on responding to data breaches, along with an accompanying blog post and video. The data breach response guidance follows the issuance of the FTC’s “Start with Security” data security guidance last year and builds upon recent FTC education and outreach initiatives on data security and cybersecurity issues. The FTC’s data…