Natalie Tipping reports: A Kent NHS Trust has apologised to patients after their records were accessed inappropriately, leading to a police probe into the incident. Letters have been sent out to patients of the Kent and Medway NHS and Social Care Partnership Trust (KMPT) detailing that a member of staff has been dismissed from their…
Oregon tax agency employee copied personal data of 36,000 people
Hillary Borrud reports: An employee at Oregon’s tax collection agency copied the data of 36,000 people, including social security numbers, and stored the files to a personal account, the state announced on Friday. The Department of Revenue detected the breach on Feb. 23 and moved quickly to remove the files from the employee’s cloud account,…
MX: Movimiento Ciudadano fined almost $2 million for 2016 voter list data leak
In 2016, I reported on a leak involving a Mexican voter registration database with details on 93.4 million Mexican voters. The list had been in the possession and control of one of the political parties there, Movimiento Ciudadano, who tried to claim that they were hacked by none other than Chris Vickery, who had discovered their…
Nine Iranians Charged With Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps
An Indictment charging Gholamreza Rafatnejad, 38; Ehsan Mohammadi, 37; Abdollah Karima, aka Vahid Karima, 39; Mostafa Sadeghi, 28; Seyed Ali Mirkarimi, 34; Mohammed Reza Sabahi, 26; Roozbeh Sabahi, 24; Abuzar Gohari Moqadam, 37; and Sajjad Tahmasebi, 30, all citizens and residents of Iran, was unsealed today. The defendants were each leaders, contractors, associates, hackers-for-hire or…
SAMBA Federal Employee Benefit Association programming error resulted in mismailed information
From their press release: SAMBA Federal Employee Benefit Association (“SAMBA”) recently learned of an incident that may affect information related to eligible family members of subscribers (“family members”) covered by the SAMBA Federal Employees Health Benefits Plan in 2017. “We take this incident, and member privacy, very seriously,” Walter E. Wilson, SAMBA’s Executive Director stated….
Class action suit vs. CenturyLink and DirecTV alleges customer data can be accessed via internet search
Nat Levy reports: A lawsuit against internet provider CenturyLink and AT&T-owned DirecTV alleges the companies fail to adequately protect personal customer data — to the point that it can be found through a simple internet search. The suit was filed Monday in U.S. District Court in Seattle and seeks class action status. The plaintiff, James Jantos,…