James Benjamin, Jr. of Pessin Katz Law, P.A. writes: On January 1, 2018, several amendments to the Maryland Personal Information Protection Act, (“MPIPA”) MD Code Ann., Com. Law §14-3501 et seq. will go into effect. Businesses collecting personal information should take note and be prepared. Under the law as amended, the definition of “personal information”…
Category: U.S.
SAY San Diego Provides Notice Of Data Incident
From SAY San Diego, this press release: SAY San Diego (aka Social Advocates for Youth, San Diego) became aware of an incident impacting the security of data relating to certain participants in its Dual Diagnosis youth program, from 2013, and is taking action. Although there is no indication of actual or attempted misuse of participant…
Appellate Court Rules IT Worker Liable Under CFAA for Sabotaging Employer’s Network
Hanley Chew + Tyler G. Newby of Fenwick & West LLP write: The U.S. Court of Appeals for the Fifth Circuit affirmed the Computer Fraud and Abuse Act conviction of an IT worker who sabotaged his employer’s network, rejecting the argument that an IT worker’s authorized access to “impair” a computer network as part of…
In November, I gave thanks for fewer breach reports
Protenus has released its monthly Breach Barometer, and the statistics for November were something to be thankful for – even if they turn out to be just a brief break from the crush of breach reports we’ve seen every month. As Protenus reports, there were 28 incidents first disclosed during November. We were able to…
Lime Crime settles lawsuit over 2015 data breach
Back in February, 2015, this site noted that vegan makeup company Lime Crime had reportedly been hacked, and that some customers were voicing their displeasure over the firm’s security and lack of responsiveness when problems had been noted. Not surprisingly, then, some customers filed suit over the data breach. And also not surprisingly, neither the…
Encryption protected Golden Optometric patients’ EHR from CrySiS attack
It’s nice to read a notification where an entity had good defenses in place. Consider this notification from Golden Optometric in California: Early on the morning of November 6, 2017, the network server at Golden Optometric was infected with a variant of the “CrySiS” ransomware virus, which encrypted a limited number of files on its…