Here’s a breach I didn’t see in the media but first learned of from the Wisconsin Office of Privacy Protection. According to that office, on April 26, 2013, TerraCom, a wireless learned of a security breach involving unauthorized access to personal data and downloaded files related to over 150,000 individuals. The data was stored on…
Category: Subcontractor
Two years after a vendor is hacked, OneWest Bank notifies customers
OneWest Bank has been notifying customers of a breach that occurred back in 2011. According to their letter, a copy of which they submitted to California under the state’s breach reporting requirements, the bank recently learned that one of our service providers, was the victim of an illegal and unauthorized intrusion into its network (“Network…
Sparks details attack and data theft
From their press release: The company behind Sparks, the app that is designed to help you connect with and meet new people nearby with whom you have shared interests, and which was first presented at SXSW in 2012, has given details of an attempted Denial of Service attack allegedly undertaken by an employee of their…
NC DHHS contractor’s missing drive held over 50,000 medical providers’ names, dates of birth, and Social Security numbers
Yesterday, the North Carolina Department of Health & Human Services (DHHS) disclosed that a flash drive with information on over 50,000 medical providers who are excluded from participating in federal healthcare programs had been misplaced or lost by its contractor, Computer Sciences Corporation (CSC). The provider information included names, addresses, dates of birth, and Social…
Shades of 2003: Have contractors started holding individuals’ PII hostage again?
It’s been a long time since I’ve seen any report that a contractor or their employees were holding an organization’s client or patient data hostage as part of a dispute. To my surprise, however, there have been two such reports like that recently. One case is in the healthcare sector and I’ll be blogging about…
And yet another contractor breach
Workers United attorneys have notified the New Hampshire Attorney General’s Office that an unnamed contractor had notified WU on October 25th that a hard drive containing some retirees’ names and Social Security numbers had been stolen from their office on October 13th or 14th. Notification letters were mailed to those affected on or after November…