WSYX/WTTE reports: A 13-year-old student at the Columbus City Preparatory School for Boys is under investigation after he reportedly used a teacher’s credentials to get into the district’s system, created a website with information about his fellow students, and made threats. Columbus Police say they received a report on March 15th that the student had…
Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
Brian Krebs reports: Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees — in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so far found no indication that employees have abused access to this data. Read…
Tesla sues former staff for data theft
Reuters reports: Tesla filed a lawsuit on Thursday against a former engineer at the company, claiming he copied the source code for its Autopilot technology before joining a Chinese self-driving car startup in January. The engineer, Guangzhi Cao, copied more than 300,000 files related to Autopilot source code as he prepared to join China’s Xiaopeng…
Spanish Gym Franchise Database Exposed By Partner’s Data Breach
Bob Diachenko reports: On March 8th, 2019, I have identified a passwordless MongoDB database that was exposing sensitive information of an estimated 6,608 VivaGym job candidates and other business related data. VivaGym is a Spanish low-cost gym franchise operating in Spain and Portugal. At the moment of the discovery, database already had a ‘WARN’ collection,…
The Lawyer’s Duty When Client Confidential Information is Hacked From the Law Firm
Anton Janik, Jr. of Mitchell, Williams, Selig, Gates & Woodyard, P.L.L.C. writes: As attorneys, our livelihood is often heavily dependent upon the keeping of secrets. But in this complex electronic-data driven environment we work in, where physical security via locked doors and piercing alarms may no longer be solely sufficient to keep client confidences from…
Settlement in 2015 UCLA Health Data Breach Class Action
Top Class Actions reports: A $7.5 million class action settlement has been reached, resolving claims that a July 2015 data breach exposed personal information stored by the UCLA Health Network. The UCLA Health class action settlement provides $2 million to pay for unreimbursed loss claims and preventative measure claims. In addition, UCLA Heath has agreed…