If you’re supposed to report a breach to the state of California, you’d darn well better report it in a timely fashion. HealthLeaders Media reports that Lucile Salter Packard Children’s Hospital at Stanford University has been fined $250,000 by the California Department of Public Health for failing to report a patient records breach <del>by April 23</del>. The…
Category: Of Note
Report: RBS WorldPay Hacker Gets Four Years’ Probation
Robert McMillan reports: The mastermind behind one of the biggest hacking paydays in history has been sentenced to four years’ probation and an US$8.9 million fine, according to published reports. Victor Pleshchuk, 28, was sentenced to four years’ probation on Wednesday, according to Bloomberg News. He is considered the leader of a group of criminals who…
HEI Hotels & Resorts notifies customers of POS compromise (updated)
Lawyers for Connecticut-based HEI Hospitality (HEI Hotels & Resorts) have informed the New Hampshire Attorney General’s Office that HEI discovered that a “vulnerability in an information system at certain of its hotel properties may have been exploited, and credit card information related to certain transactions occurring between March 25 and April 17, 2010 may have…
Delaware retiree sues Aon, citing “irreparable harm” (UPDATE)
From Courthouse News: Aon Consulting disclosed online the names and Social Security numbers of 22,000 state retirees, a class action claims in New Castle County Court. The class claims Aon did not bother to scrub personal information before posting online a request for proposals from insurers. “Gail Slaughter’s identity is likely for sale on the…
Article: Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach Notification Statutes
Dana Lesemann of the Howard University School of Law has an article of note in the Akron Intellectual Property Journal, Vol. 4, p. 203, 2010. Here’s the abstract: Companies facing the loss of a laptop or a compromised server have long waged battles on several fronts: investigating the source of the breach, identifying potentially criminal…
Stolen and sold: Private details of thousands of World Cup fans
Jason Lewis reports on the FIFA breach that was mentioned on this site last month (here). The personal details of thousands of football fans who bought World Cup tickets from official FIFA outlets have been stolen and sold for up to £500,000. […] The data breach first emerged in Scandinavia where the details of 50,000…