Today’s reminder that some “human error” breaches can put lives at risk. Alex Horton reports: Army officials inadvertently disclosed sensitive information about hundreds of immigrant recruits from nations such as China and Russia, in a breach that could aid hostile governments in persecuting them or their families, a lawmaker and former U.S. officials said. A…
MyEquifax.com Bypasses Credit Freeze PIN
Brian Krebs reports: Most people who have frozen their credit files with Equifax have been issued a numeric Personal Identification Number (PIN) which is supposed to be required before a freeze can be lifted or thawed. Unfortunately, if you don’t already have an account at the credit bureau’s new myEquifax portal, it may be simple…
Facebook Suit Reveals Ukrainian Hackers Used Quizzes to Take Data from 60,000 Users
Kevin Poulsen reports: Two Ukrainian men used online quizzes to lure more than 60,000 Facebook users into installing malicious browser extensions that exfiltrated their profile data and friends lists to offshore servers, according a federal lawsuit the company filed late Friday. The men, Andrey Gorbachov and Gleb Sluchevsky, allegedly used the browser extensions to overlay…
Licensed Producer under scrutiny for possible privacy breach of patient info
Emma Spears reports: Reports are surfacing that Canadian licensed producer RedeCan is facing a privacy breach after a mass email to patients revealed their personal information to other patients. Although officials from RedeCan have not commented publicly, an email from the LP to a patient impacted by the breach indicates the company has self-reported the…
MA: Release of employees’ partial Social Security numbers troubles Worcester teachers, School Committee members
Scott O’Connell reports: Teachers and School Committee members are looking for answers from the School Department in the wake of the district’s release of personal information for thousands of school employees to a testing company last year. According to Worcester Superintendent Maureen Binienda, the district’s IT department opted to use the last four digits of…
Names, banking information accidentally shared in emails to University of Waterloo students
CBC News reports: Personal information including names, student numbers, addresses and banking information of some University of Waterloo students was accidentally sent to a mailing list of 2,000 students, the school says. The emails went out Wednesday evening. Of the emails sent to the mailing list, 15 contained some private information like names and student numbers,…