by Steven Englehardt, Gunes Acar, and Arvind Narayanan Recently we revealed that “session replay” scripts on websites record everything you do, like someone looking over your shoulder, and send it to third-party servers. This en-masse data exfiltration inevitably scoops up sensitive, personal information — in real time, as you type it. We released the data…
Category: Subcontractor
Federal Appeals Court Slams Data Breach Privilege Claim
Craig A. Newman writes: In the most recent object lesson in a data breach privilege case, a federal appeals court has ordered a Michigan-based mortgage lender to turn over privileged forensic investigatory documents after the investigator’s conclusions were revealed in discovery. Background. In the case, Leibovic v. United Shore Financial Services, LLC, et al, No. 17-2290,…
DJO Global Notifies St. Rose Dominican Patients of Potential Breach of Personal Information
January 5, 2018 – DJO Global, Inc., a global provider of medical device solutions for musculoskeletal health, vascular health and pain management, announced today that on September 25, 2017 DJO discovered an incident involving the potential disclosure of certain personal information of individuals who received a DJO Global product from the Siena, San Martin or De…
German Health Ministry lobbyist data theft trial begin
Two men accused of stealing data from the Federal Ministry of Health face trial in Berlin Thursday. A system administrator is alleged to have provided a pharmaceutical lobbyist with inside information. An external IT expert working for the German Health Ministry is being charged with receiving bribes from a lobbyist working for the pharmaceutical industry to spy…
NYU Langone Health Notifies Patients of Improperly Disposed Binder Containing Patient Information
NYU Langone Health notified patients this week that a binder containing a log with information related to presurgical insurance authorizations from NYU Langone Health Pediatric Surgery Associates was mistakenly recycled by NYU Langone’s cleaning company on October 17, 2017. Patient social security numbers were not included and therefore are not at risk, and there is…
Cape Cod students affected by Medicaid billing vendor’s data breach
Cynthia McCormick reports on the resolution of a lawsuit stemming from a laptop theft in 2014. The breach was previously reported on this site: Hundreds of Cape Cod students — many with special needs — were put at risk of identity fraud and theft when a laptop was stolen from an employee of a billing…