Rebecca Rosenberg reports an update to a case first noted in June, 2015: The leader of an identity theft ring that used stolen patient records purchased from a crooked hospital employee to pull off shopping sprees at major Manhattan department stores took a plea deal Monday. Fernando Salazar, 28, admitted to buying the records of 250 Montefiore…
Category: U.S.
KS: Barton County Treasurer’s Office falls for email scam
KWCH reports that the Barton County Treasurers Office has become the latest victim of an email scam that resulted in a wire transfer of $48,000 to a bank in Georgia. Barton County Sheriff Brian Bellandir said on May 13, the treasurer’s office received several emails which appeared to be from the Barton County Administrator’s Office….
UBS wins $1.1M from Wells Fargo in insider data theft case
William Sprouse reports the outcome of an arbitrated insider data breach case where a departing employee allegedly took client data with him to his new employer. I don’t think this case was ever covered on this site before, but Law360 had reported the lawsuit back in 2012. Sprouse reports: A FINRA arbitration panel ruled a…
Standing should not stop data breach suit, civil liberties group says
Worth re-visiting in light of the Supreme Court’s ruling in Spokeo v. Robins: Consumers whose personal information was accessed in a cyberattack should not have to show someone stole their identities or ruined their credit to have standing to sue the hacked company, according to a friend-of-the-court brief filed in a federal appeals court. Washington-based Electronic…
O’Charley’s suffers payment card network compromise, notifies customers
Dave Williams reports: Diners who ate at an O’Charley’s restaurant between March 18 and April 8 may have been affected by a data breach, Georgia Attorney General Sam Olens warned Friday. Read more on Atlanta Business Chronicle. O’Charley’s statement, posted today on their web site, explains what happened and offers tips for guests to protect themselves. It appears that…
Insider breach – Shapeshift’s story
@SwiftonSecurity kept telling everyone on Twitter that we #MUSTREAD the story of what happened at Shapeshift.io. And with good reason: it’s a phenomenal account of an insider breach told with the kind of refreshing honesty that’s often missing in most breach disclosures. It also reads like a thriller. I’m going to give readers a different…