Vincent Moleski reports: The California Department of Consumer Affairs suffered a malware attack Wednesday morning, affecting workstations and disrupting computer networks. Veronica Harms, the department’s deputy director, said in a prepared statement that all services to the public remained open, but the department had shut down some of its computer information network to protect electronic…
Data Breach Might Impact 500,000 San Diego Unified School District Students, Former Students, and Some Staff
Steven Luke and R. Stickney report: San Diego Unified School District officials are informing parents and former students of a large data breach. Personal data including Social Security numbers from as many as 500,000 students was compromised or possibly stolen, officials say. The breach dating back to January 2018 was uncovered in October by district IT employees who…
Caribou Coffee Customer Data Exposed In POS Security Breach
A breach involving coffee customer data at Caribou Coffee stores throughout the country. A notice on their web site explains: Data Security Notice Dear Valued Guests: We want to be in touch with you regarding a recent incident that may have involved access to your payment card information. What Happened On November 28, 2018, we…
Eyeware retailer Warby Parker forces password reset; notifies 198,000 customers of credential stuffing attack
Sam Woods reports: Eyewear retailer Warby Parker announced Thursday that it had suffered a cybersecurity breach that may have affected up to 198,000 customers.Hackers accessed customer usernames and passwords from unrelated cyber break-ins at other companies, according to a Warby Parker news release. The hackers then used that information to try to gain unauthorized access to client…
LifeBridge sued over 2016 breach
Remember the LifeBridge malware incident disclosed earlier this year where more than 500,000 patients were notified of a malware incident that had been discovered in March, 2018? LifeBridge’s notification indicated that their investigation had revealed that an unauthorized person had accessed the server in 2016. It wasn’t totally clear to me at the time whether…
Man pleads guilty to phishing scheme that victimized Connecticut school employees
A 36-year-old Nigerian citizen pleaded guilty Thursday before a federal judge to a conspiracy charge stemming from a scheme to obtain the personal identifying information of school employees, including some at Sacred Heart Academy in Hamden. Olukayode Ibrahim Lawal, last living in Smyrna, Georgia, pleaded guilty before U.S. District Judge Jeffrey A. Meyer in New…