Zack Whittaker reports: A security vulnerability in a popular iPhone call recording app exposed thousands of users’ recorded conversations. The flaw was discovered by Anand Prakash, a security researcher and founder of PingSafe AI, who found that the aptly named Call Recorder app allowed anyone to access the call recordings from other users — by knowing their…
Human rights lawyers ask Australia’s ‘hacking’ Bill be redrafted
Asha Barbaschow |reports: Human Rights Law Centre and the Law Council of Australia have asked that the federal government redraft the Surveillance Legislation Amendment (Identify and Disrupt) Bill 2020, calling its contents “particularly egregious” and “so broad”. The Bill, if passed, would hand the Australian Federal Police (AFP) and the Australian Criminal Intelligence Commission (ACIC)…
Facebook’s lawyers blast attorney fees bid in Adkins v. Facebook settlement
Sara Merken reports: Facebook Inc is pushing back on plaintiffs lawyers’ request for nearly $12 million in fees and costs for securing an injunctive relief-only settlement stemming from a 2018 cyberattack that affected millions of Facebook users. […] The litigation stemmed from a September 2018 breach that affected the personal information of about 29 million…
German soccer club Stuttgart fined for data breach
AP reports: German soccer club Stuttgart has been fined 300,000 euros ($357,000) for misusing private data about its members, a regulator said Wednesday. Stuttgart had been accused of passing on data which was potentially useful for marketing to third parties without informing members. Read more on AP.
How do you make a data breach even worse? You notify the victims that they are dead.
The headline says it all: Some Treasure Valley residents receiving letters from Saint Alphonsus saying they are dead The situation started routinely enough — an employee’s email account was compromised. In this case, the access was used to send out spam. Somehow, however, in the process of sending breach notifications, there was a mail merge…
PEI-Genesis, Inc. Provides Notice of Data Privacy Event
PHILADELPHIA, March 8, 2021 /PRNewswire/ — PEI-Genesis, Inc. (“PEI-Genesis”) recently announced an event that may have impacted the privacy of personal information relating to certain individuals and businesses. While PEI-Genesis is unaware of any attempted or actual misuse of personal information in relation to the event, PEI-Genesis provided potentially affected individuals with notice, information about the event and…