As noted here and elsewhere, the number of breaches reported in the media and other sources declined in 2009 relative to 2008, but newly obtained data suggests that once again, there was much that we did not know. During the period September 1 – December 31, 2009, 141 breach reports were received by the…
Category: Other
Victim Asks Capital One, ‘Who’s in Your Wallet?’
Brian Krebs writes: In December, I wrote about how a Louisiana electronics testing firm was suing its bank, Capital One, to recover the losses after cyber thieves broke in and stole nearly $100,000. It looks like another small firm in that state that was similarly victimized by organized crooks also is suing Capital One to…
Six newly revealed breaches on HHS site
It seems that using the new HHS/OCR web site will be even more difficult than I anticipated, as they are sorting breach reports by the date of breach, not date that the incident was added to their site, so I have to review the entire list to see what’s been added instead of just looking…
NSW Govt ousts web developer over security breach
Ry Crozier reports: The NSW Government has terminated its relationship with the developers of the state’s transport blueprint website after they admitted a security lapse – rather than hack – was the cause of a document leak. Transport minister David Campbell sought to make “a brief clarifying statement” to state parliament late yesterday after causing…
UK: East Lancashire councils in data protection mix-up
Sam Chadderton reports: Two East Lancashire Councils have been accused of unlawfully processing personal details after a data protection mix-up. Hyndburn Borough Council and Ribble Valley Borough Council both failed to renew registrations with the Information Commissioner’s Office (ICO) register of data controllers. Any organisation using personal information about the public must be registered. It…
Network flaw causes scary Web error
Jordan Robertson reports: A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers’ accounts with full access to troves of private information. The glitch – the result of a routing problem at the family’s wireless carrier, AT&T – revealed a little known…