Hanley Chew + Tyler G. Newby of Fenwick & West LLP write: The U.S. Court of Appeals for the Fifth Circuit affirmed the Computer Fraud and Abuse Act conviction of an IT worker who sabotaged his employer’s network, rejecting the argument that an IT worker’s authorized access to “impair” a computer network as part of…
Category: U.S.
In November, I gave thanks for fewer breach reports
Protenus has released its monthly Breach Barometer, and the statistics for November were something to be thankful for – even if they turn out to be just a brief break from the crush of breach reports we’ve seen every month. As Protenus reports, there were 28 incidents first disclosed during November. We were able to…
Lime Crime settles lawsuit over 2015 data breach
Back in February, 2015, this site noted that vegan makeup company Lime Crime had reportedly been hacked, and that some customers were voicing their displeasure over the firm’s security and lack of responsiveness when problems had been noted. Not surprisingly, then, some customers filed suit over the data breach. And also not surprisingly, neither the…
Encryption protected Golden Optometric patients’ EHR from CrySiS attack
It’s nice to read a notification where an entity had good defenses in place. Consider this notification from Golden Optometric in California: Early on the morning of November 6, 2017, the network server at Golden Optometric was infected with a variant of the “CrySiS” ransomware virus, which encrypted a limited number of files on its…
Banks Find (Some) Success Suing Over Data Breaches
Donna Wilson of Manatt, Phelps & Phillips, LLP writes: Banks continue to file suit against retailers, hoping to shift the costs of data breaches, with some recent success. What happened In January 2016, hackers accessed Eddie Bauer’s point-of-sale register system and installed malicious software that infected every Eddie Bauer store in the United States and…
MidMichigan notifies patients of potential breach
The Alpena News reports: MidMichigan Medical Center-Alpena notified approximately 1,900 patients last week about a potential breach of personal data, according to a press release. The information may have included patient names, addresses, social-security numbers and clinical data. The incident that gave rise to the medical center’s investigation occurred during the late evening hours of…