On October 29, Kaiser Permanente began notifying employees of a breach that occurred August 24th when their names, Social Security numbers, and other information were mistakenly e-mailed to an individual not authorized to receive such information. From their letter: [First Name] [Last Name] [Street Address] [City], [State], [ZIP code] Dear [First Name], We are writing…
Category: U.S.
Former State Department Employee Pleads Guilty To Federal Charge in Identity Theft Scam
Rodney P. Quarles, Jr., 26, of Charlotte Hall, Md., pled guilty yesterday to a federal charge stemming from an identity theft scam in which he and others used stolen credit cards to make more than $70,000 in purchases. According to a statement of offense, signed by the defendant as well as the government, Quarles worked…
MT: Two employees charged with stealing credit card info from Helena restaurant
Melissa Anderson reports another instance of an insider breach in the hospitality sector: Two men made their initial appearance in a Helena courtroom on Thursday, accused of stealing credit card numbers from customers at the L&D Chinese Buffet. […] The two men, who worked at the restaurant at the time of the alleged crimes, are…
VSECU notifies consumers of missing backup tapes
TD Bank isn’t the only financial sector entity dealing with missing backup tapes these days. Vermont-based VSECU sent out notification letters yesterday after two unencrypted backup tapes created on August 27th were discovered missing on September 10. The tapes contained names, addresses, Social Security numbers, driver’s license numbers, financial account information, and transaction records. The credit union…
Barnes & Noble discloses breach involving pin pads at dozens of stores (update2)
Remember when Michael’s Stores found that pin pads in some stores had been replaced? It looks like the same thing has happened to bookseller Barnes & Noble’s brick and mortar stores. According to the New York Times, the firm discovered the breach on September 14. As of now, it appears that pads at 63 stores…
Service Sells Access to Fortune 500 Firms
More great investigative reporting from Brian Krebs: An increasing number of services offered in the cybercrime underground allow miscreants to purchase access to hacked computers at specific organizations. For just a few dollars, these services offer the ability to buy your way inside of Fortune 500 company networks. The service I examined for this post…