Were the Goatse crew wearing white hats, grey hats, or black hats when they exposed the iPad/ATT breach recently? John Brownlee says they did the right thing and comments on the arrest of one of them following the execution of a search warrant related to the breach disclosure: One of the members of the Goatse…
Category: Of Note
iPad Breach Update: More Personal Data Was Potentially At Risk
Kevin Mahaffey says that there was more personal information at risk in the recent iPad/AT&T breach than originally revealed: The iPad security breach last week potentially exposed the emails of 114,000 AT&T customers, but that is not the only information that could have been discovered by clever hackers. iPad owners will be surprised to know…
SSA teleworkers may be putting personal data at risk, IG says
# Alice Lipowicz reports: While teleworking is improving morale at the Social Security Administration, it also may be exposing individuals’ personal information to unauthorized disclosure via employees’ computers, according to a new report from the SSA Office of Inspector General. […] “We [have] determined [that] Office of Disability Adjudication and Review practices may have exposed claimant data…
SB hospital fined $325,000 for breach of patient records (updated)
Lora Hines reports: Community Hospital of San Bernardino has been fined a total of $325,000 for breaches of more than 200 patient records by two employees in 2009. Community Hospital is one of five facilities statewide recently fined $675,000 for unauthorized access of nearly 230 medical records for more than 200 patients in violation of…
Apple’s Worst Security Breach: 114,000 iPad Owners Exposed
Ryan Tate writes: Apple has suffered another embarrassment. A security breach has exposed iPad owners including dozens of CEOs, military officials, and top politicians. They—and every other buyer of the wireless-enabled tablet—could be vulnerable to spam marketing and malicious hacking. […] The specific information exposed in the breach included subscribers’ email addresses, coupled with an…
UK: Data Protection Act is out of kilter with EU law, warns privacy lawyer
Warwick Ashford reports: The single most important change required in UK data protection regulation is to bring the law into line with European legislation, says Stewart Room, partner at law firm Field Fisher Waterhouse. Section 13 of the UK Data Protection Act (DPA) is totally out of kilter with the EU directive on personal data,…