It was only a few days ago that there were reports that Florida had exposed the last 4 digits of almost 1,000 Kansas residents’ Social Security Numbers. Not to be outdone, Kansas posted its own citizens SSN, too, it seems. As Brett Samuels reports: The Kansas Secretary of State’s office on Thursday posted the personal…
Search Results for: education
Health Data Breaches in 2017: The Year in Review
Protenus, Inc. has released its 2017 review of breaches involving health data. It is the second annual review they have published since we began collaborating on data collection and analyses. As a reminder of last year’s major findings: Protenus reported that in 2016, insider incidents constituted approximately 43% of the 450 incidents we had compiled…
Tupelo schools impacted by Questar data breach
Daily Journal reports: The Mississippi Education Department’s assessment vendor, Questar Assessment, Inc., reported today that 562 students in the Tupelo Public School District were impacted by the data breach the company discovered last week. Questar’s preliminary analysis found that an unauthorized user viewed student assessment records between Dec. 31, 2017 and Jan. 1 from Tupelo…
Mississippi student data accessed in Questar testing-vendor breach
Bracey Harris reports: Mississippi education officials were unable to say Friday how many students’ personal information might have been obtained in the wake of a data breach at Questar one of the state’s testing vendors. The Mississippi Department of Education said in a statement Friday that an unauthorized user accessed the information of two districts…
University of Central Florida settles hacking case
There’s an update to the University of Central Florida breach that was first disclosed in early 2016. The Orlando Sentinel reports: The University of Central Florida has agreed to spend an additional $1 million annually to protect students’ and employees’ personal information, according to a legal settlement reached with former students in the wake of…
Website operators are in the dark about privacy violations by third-party scripts
by Steven Englehardt, Gunes Acar, and Arvind Narayanan Recently we revealed that “session replay” scripts on websites record everything you do, like someone looking over your shoulder, and send it to third-party servers. This en-masse data exfiltration inevitably scoops up sensitive, personal information — in real time, as you type it. We released the data…