From the ICO: The Information Commissioner’s Office (ICO) has fined Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data. Between October 2014 and May 2018 Cathay Pacific’s computer systems lacked appropriate security measures which led to customers’ personal details being exposed, 111,578 of whom were from the UK, and…
NZ: Cyberattackers hack Wellington school’s computer system
Roxanne Libatique reports: It seems schools also aren’t safe from cyberattackers as Hutt Valley High School has revealed that hackers have targeted its computer system. The school informed the students’ parents about the cyberattack on February 25 – warning that personal data such as family contact details, names, addresses, and students’ records may have been…
OCR settles complaint against doctor for failure to have appropriate risk assessment and security controls, despite technical assistance
OCR has settled a complaint against a covered entity for violations that first occurred prior to November, 2013, but continued thereafter. Yes, 2013. That’s when Steven A. Porter, M.D., first reported a breach to OCR that involved his business associate Elevation43. According to the complaint Porter filed at the time, and as described by OCR,…
French Firms Rocked by Kasbah Hacker?
Brian Krebs reports: A large number of French critical infrastructure firms were hacked as part of an extended malware campaign that appears to have been orchestrated by at least one attacker based in Morocco, KrebsOnSecurity has learned. An individual thought to be involved has earned accolades from the likes of Apple, Dell, and Microsoft for helping to find and…
UK: Tesco issues 600,000 new Clubcards after credential stuffing attack
Kalila Sangster reports: Tesco (TSCO.L) is issuing new cards to 600,000 Clubcard account holders after discovering a security breach. The supermarket said some customers may have fallen victim to online fraud after a database of stolen usernames and passwords from other platforms had been tried out on its website. The use of the stolen data…
NZ: Tuia 250 privacy breach: Tech boss signed off on government website with no testing
Craig McCulloch of RNZ reports: A top tech boss at the Ministry of Culture and Heritage (MCH) reviewed the Tuia 250 website’s security and declared it “fit for purpose” just two months before a major breach was uncovered, new correspondence shows. […] Correspondence obtained by RNZ under the Official Information Act shows the website –…