John F. Lushis, Jr. of Norris McLaughlin P.A. writes: In December 2005, Pennsylvania enacted the Breach of Personal Information Notification Act (the “2005 BPINA”). Known as the 2005 BPINA Act, its purpose is to provide “for security of computerized data and for the notification of residents whose personal information data was or may have been disclosed…
Category: State/Local
Bluefield University cyberattack affects employees, students, and some students’ parents (2)
Updated May 13: It appears that Bluefield U. has not warned students that the university’s system is still compromised and that the threat actor can see and acquire files. Yesterday, a student that DataBreaches will not name submitted a Virginia Tuition Assistance Grant application with his full Social Security number, date of birth, and other…
New York AG Releases Guide for Businesses on Effective Data Security
Damon W. Silver of JacksonLewis writes: As noted in a prior post, New York’s Attorney General (“NYAG”) has made enforcement of the New York SHIELD Act an enforcement priority. The SHIELD Act requires organizations handling personal information related to New York residents to maintain reasonable safeguards to protect that information. Maintaining its focus on this area, the NYAG…
Virginia Passes Legislation Prohibiting the Use of Employees’ Social Security Numbers as Identifiers
Jason C. Gavejian and Joseph J. Lazzarotti of JacksonLewis write: On March 21, 2023, Virginia’s governor approved Senate Bill 1040, which prohibits an employer from using an employee’s social security number or any derivative as an employee’s identification number. The bill also prohibits including an employee’s social security number or any number derived from the social…
BREAKING: BreachForums owner “Pompompurin” arrested
Bob Van Voris and William Turton report: Federal agents have arrested a Peekskill, New York, man they say ran the notorious dark web data-breach site “BreachForums” under the name “pompompurin.” Conor Brian Fitzpatrick was arrested by a team of investigators at his home around 4:30 p.m. Wednesday, FBI Special Agent John Longmire said in a…
NY Attorney General James Continues Crackdown on Unregistered Cryptocurrency Platforms
If you’re a cryptocurrency platform doing business in New York but are not registered with the state, Attorney General James will be coming after you. NEW YORK – New York Attorney General Letitia James today continued her efforts to crack down on unregistered cryptocurrency platforms by filing a lawsuit against KuCoin for failing to register…