East Kilbride News reports: A Hairmyres Hospital worker chatted up patients after breaching data protection rules to get contact details from their medical records. Andrew Stewart had access to patient files at two different medical facilities, and allegedly misused his access privileges to obtain contact data on female patients whom he would then contact. He…
Public Relations: How a Marketing & PR Platform Exposed Thousands of Users
The UpGuard research team reports: The UpGuard Research team can now disclose that a data collection originating from iPR Software (risk score: 683) containing details of 477,000 media contacts, business entity account information, over 35,000 user password hashes, assorted documents, and administrative system credentials has been secured. The Amazon S3 storage bucket contained a large collection…
Pensacola officials not sure if cyberattack related to shooting at naval air station
Tina Burnside and Eric Levenson report: The city of Pensacola, Florida, said it has experienced a cyber “incident” and has disconnected several city services until the issue can be resolved. Mayor Grover Robinson told CNN affiliate WEAR the city has been dealing with a cyberattack since late Friday. Read more on CNN. h/t, @VERISDB
How can we screw up incident response? Let me count the ways — Monday UK Edition
This week, DataBreaches.net was reminded yet again of the risks of trying to alert an entity to a breach. This time, it was not me who was threatened or any of the whitehat researchers I know. This week, it was a citizen who found patient records on the street in his town and undertook to…
Banner Health agrees to $6 million settlement over 2016 breach
Jessica Kim Cohen reports an update on a 2016 breach covered on this site: Banner Health has agreed to pay up to $6 million to victims of a massive data breach the Arizona health system experienced in 2016, according to court documents filed last week. The plaintiffs in the case filed the motion for preliminary…
Metro Atlanta city experiences data breach, FBI investigating
Jason Braverman reports: The City of Newnan recently experienced a data breach where an “unauthorized individual” was in possession of electronic files containing data maintained by the city, including personal information, the city told 11Alive. On Sept. 4, the city learned of the data breach regarding files that contained vehicle accident report data from approximately…