It seems this was the week for following up on Carnival Corporation breaches. Earlier this week, state attorneys general announced a $1.25 million multistate settlement with the cruise line over a 2019 data breach first disclosed in 2020. But there was other news concerning the cruise line this week, too. On Friday, the New York…
Category: U.S.
New York State School District Audits Released in June
New York State Comptroller DiNapoli released more school district audits in June. As always, some of the audits do not reveal all the concerns or recommendations. Some concerns or recommendations are shared with districts confidentially for security reasons. Here are summaries of audits of school districts released in June that relate to school district IT:…
FTC Finalizes Action Against CafePress for Covering Up Data Breach, Lax Security
CafePress Must Bolster Data Security Protections, Pay Half a Million Dollars The Federal Trade Commission finalized an order against CafePress over allegations that it failed to secure consumers’ sensitive personal data including Social Security numbers and covered up a major data breach. The Commission’s order requires the company to bolster its data security and requires its former…
School Admin Shared Non-Public Details of Ransomware Attack with Private Company
Scott Travis reports ethical questions about yet more lack of transparency by Broward County Public Schools when they were hit by Conti ransomware. In November 2021, DataBreaches provided a brief recap of the situation to that date, reporting that In March, 2021, Broward County Public Schools disclosed a breach that captured the public’s attention when Conti…
Maryland Amends Data Security and Breach Notice Obligations
Julia K. Kadish, Kari M. Rollins, and Liisa M. Thomas of Sheppard, Mullin, Richter & Hampton LLP write: Maryland recently passed two companion bills amending the state’s Personal Information Protection Act. The bills modify the data breach notification requirements and scope of businesses subject to the data security requirements. The key changes are summarized below, and will…
Brooks County pays off hacker with tax dollars after ransomware attack
Andrew Christiansen reports: A recent ransomware attack on Brooks County’s Justice of the Peace and district courts, and finance department, cost it more than $37,000. “I’m very unhappy because of that,” said resident Mario Villarreal. “It’s scary — of course it is — for everybody.” Brooks County Judge Eric Ramos said the attack took place…