On October 16, Millers Mutual Group started notifying claimants whose information was stored on Systema Software’s server. The leak was first disclosed by DataBreaches.net in September, and Millers says they first learned of it on September 23, apparently weeks after other entities were notified by the vendor or Chris Vickery, who had discovered the leak. In a letter to…
Category: Subcontractor
Service Systems Associates updates its breach disclosure
Back in July, this site reported that a number of gift shops at zoos were impacted by a breach involving their point of sale systems. Service Systems Associates (SSA) issued a statement at the time. I’m not sure why more impacted entities are first disclosing now, but WBAP reports: You’ll want to check your bank statements if you went…
America’s Thrift Stores notifies customers of payment card breach
Thrift store chain America’s Thrift Stores has disclosed a data breach involving an unnamed third-party provider. A statement prominently linked from their home page begins: A Statement From Our CEO Concerning Cyber Security Dear Customers, America’s Thrift Stores recently learned that it was the victim of a data security breach that occurred through software used by…
Golden State Risk Management Authority notifying members of Systema Software incident
Despite having been notified almost one month ago by Chris Vickery and/or Systema Software, some entities whose databases were exposed on AWS by Systema Software still do not appear to have issued public statements about the incident. Nor have I seen any reports appearing on HHS’s public breach tool. But in a statement posted on its…
Major Patient Privacy Breach Alleged At Palo Alto VA
Benjamin Krause writes: VA OIG just reported that Palo Alto VA Health Care System unlawfully gave patient data to a private IT company despite employees not having cleared background checks. The watchdog investigated allegations that the Palo Alto VA informatics chief entered into an illegal agreement with a health care company called Kyron. VA OIG confirmed allegations…
CA: Data breach involves Big Blue Bus customers
The Santa Monica Daily Press reports: The Big Blue Bus is alerting customers of a potential data breach related to the NextBus program. Officials were notified on Sept. 25 of a data security incident at NextBus, the company that BBB works with in order to make predictive real-time bus arrival information available to customers. BBB…