Thomas Brewster reports: Another day, another huge leak of government information. Last December, a whopping 3 terabytes of unprotected data from the Oklahoma Securities Commission was uncovered by Greg Pollock, a researcher with cybersecurity firm UpGuard. It amounted to millions of files, many on sensitive FBI investigations, all of which were left wide open on…
VA: Notice of Click2Gov-related Data Breach of Hanover County Online Payment System
From the county’s notice, which you can find in its entirety here: Hanover County was recently notified about potential unauthorized charges on credit cards used by customers to pay their utility bills via the website between August 1, 2018 and January 9, 2019. The County takes the security and protection of its customers’ confidential information…
PH: Updated claims: No passport data loss, breach
Roy Mabasa and PNA report: Foreign Affairs Secretary Teodoro Locsin Jr. on Tuesday backpedaled from his earlier allegations that French contractor Oberthur reportedly ran away with the data of millions of passport applicants when its contract was abruptly terminated by the Philippine government in 2013. “Data is not run-away-able but made inaccessible. Access denied,” Locsin…
Ouch: Patient records found years later in his home by a former spouse of a former Hanger Clinic employee
Hanger Clinic in Florida posted the following undated notice on their site. DataBreaches.net had emailed them to ask when the notice was issued and how many patients were notified, but has received no reply as yet. Nor is this incident on HHS’s breach tool as of the time of this posting: This Notice applies only…
WI: Criminals may have stolen personal info from thousands after hacking Kewaskum Police computer
Julia Fello reports: Criminals may have stolen thousands of people’s sensitive information from a hacked computer inside the Kewaskum Police Department. In a village with a population of just 4,000 Kewaskum Police Chief Thomas Bishop mailed 2,720 letters to potential victims. Most of the potential victims are from Colorado and the Chicagoland area. […] This…
U.S. authorities charge several people in SEC hacking scheme
Jonathan Stempel reports: U.S. authorities on Tuesday charged several individuals and companies in a scheme to trade on information in nonpublic corporate press releases by hacking into a U.S. Securities and Exchange Commission database. In a filing with the U.S. District Court in Newark, New Jersey, the SEC said individuals in the United States, Russia…