Now that I have additional information on a hacking incident involving the protected health information (PHI) of 156,000 patients of the Ankle + Foot Center of Tampa Bay, it is clear that this breach belongs on this site. I had previously noted it on PHIprivacy.net on January 29 after it appeared on HHS’s breach tool. At…
Category: Of Note
“S3” ring members indicted; cybercrime ring victimized hundreds
Manhattan District Attorney Cyrus R. Vance, Jr., today announced indictments of 27 individuals in connection with “S3,” a credit card forgery and identity theft ring based in Brooklyn that compromised hundreds of bank accounts, and fraudulently purchased Apple products from stores around the country to resell for profit. According to documents filed in court and…
28 million Plenty of Fish users’ personal details hacked – report (updated)
The founder and CEO of dating site Plenty of Fish reports that the site has been hacked and users’ names, email addresses, and passwords may have been acquired. Whether PayPal account information and other personal details were also acquired is uncertain and depends on whose version of the hack you read. It’s also uncertain whether…
AU: Vodafone dealer shuts down after expose
Asher Moses reports: Vodafone has terminated its dealer agreement with Communications Direct after this website on Friday revealed allegations that staff at the dealer were misusing customer information and forwarding detailed call records outside the company. Staff at the dealer were called in for a meeting this morning and told they would all be losing…
Two charged over iPad hacking on AT&T network
From Reuters: U.S. prosecutors have charged two men with stealing and distributing email addresses for about 120,000 users of Apple Inc’s popular iPad. Investigators accused Daniel Spitler and Andrew Auernheimer of using an “account slurper” to conduct a “brute force” attack over five days last June, to extract data about iPad users who accessed the…
New report: Data Breach Notifications in Europe
The EU’s ‘cyber security’ Agency ENISA, (the European Network and Information Security Agency) has today issued a report on Data Breach Notifications. The EU data breach notification (DBN) requirement for the electronic communications sector in the ePrivacy Directive (2002/58/EC) is vital to increase in the long term the level of data security in Europe. The…