“I sue you, You sue me, We both sue too easily. Too easily to let it show. I sue you and that’s all I know.” — wrote Art Garfunkel never. Alison Frankel reports: A day after Aetna sued the claims administrator Kurtzman Carson Consultants for exposing confidential medical information about Aetna clients in a settlement…
Voter, Bee databases hit with ransomware attack
Adam Ashton reports: Two Sacramento Bee databases on a third-party computer server were seized last month by an anonymous hacker who demanded The Bee pay a ransom in Bitcoin to get the data back. The intrusion, which was discovered by a Bee employee last week, exposed one database containing California voter registration data from the…
NC: Thomasville employees’ SSN accidentally released in public records request screw-up
Here we go again. Another public records request where someone sent out records without proper redaction. This time, it’s nearly 270 employees of the city of Thomasville who had their SSN disclosed improperly and then uploaded to Facebook. The city will give them credit monitoring. FOX8 has the story.
Accident recovery firm employee who sold personal data to nuisance callers is fined
A former worker at an accident repair firm who downloaded and sold the personal data of motorists to nuisance callers has been fined. Phillip Bagnall, 33, of Scotta Road, Eccles, Greater Manchester, was an employee of Nationwide Accident Repair Services Limited (NARS) when he was found to be accessing suspicious volumes of customer data from…
FBI Private Industry Notification warns schools about TheDarkOverlord
On January 31, 2018, the FBI released a Private Industry Notification (PIN) warning schools about the hacker(s) known as TheDarkOverlord. The information in the PIN was provided by the FBI and the Department of Education’s Office of the Inspector General, and it appears to be an expanded version of a prior alert to schools issued by…
Shoot the messenger, Thursday edition: Botched ICO leaks users’ passport data, calls police on guy who found the bug
MIX reports: Fledgling cryptocurrency startup Sentinel Chain, which promised to “unlock the economic potential” of the poor, launched its initial coin offering (ICO) earlier this week, but it missed one thing: a critical vulnerability that made it possible to scrape its users’ personal data, including their emails and passport images. Shortly after kicking off its…