A laptop stolen from an employee’s desk in mid-December contained names and social security numbers of people employed by the Educational Testing Service (ETS) as readers, according to a report filed (pdf) with the Maryland Attorney General’s Office this week. The laptop, which had been locked into its docking station, does not appear to have…
Search Results for: education
Joint Guidance on the Application of the Family Educational Rights and Privacy Act (FERPA) And the Health Insurance Portability and Accountability Act of 1996 (HIPAA) To Student Health Records
The purpose of this guidance is to explain the relationship between the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, and to address apparent confusion on the part of school administrators, health care professionals, and others as to how these two…
American Radio Relay League paid $1 million ransom payment
ARRL is the national association for Amateur Radio in the US. Founded in 1914 by Hiram Percy Maxim as The American Radio Relay League, ARRL is a noncommercial organization of radio amateurs. ARRL numbers within its ranks the vast majority of active radio amateurs in the nation and has a proud history of achievement as the standard-bearer in amateur affairs. ARRL’s…
Tabb Inc. Security Gaffe Exposes 200,000 Background Check Files for More Than Six Months (1)
An unsecured backup blob exposed pre-employment background checks on approximately 200,000 people. Applicant files contained various amounts of personal and occupational information, including SSN, name, address, driver’s license, date of birth, education and employment history, and in some cases, criminal background checks. Files went back 15 years. The blob was unsecured for at least six…
International Investigation Leads to Shutdown of RADAR-DISPOSSESSOR Ransomware Group (1)
The following takedown and operation relate, in small part, to a leak DataBreaches reported to the FBI and a hosting company. DataBreaches did not name the victim entities or RADAR-DISPOSSESSOR in that blog post to prevent others from finding or misusing the victims’ data. The dispossessor.com website now displays a seizure notice, where the word…
Acadian Ambulance hit by ransomware attack; Daixin claims info on 10 million patients stolen
A new listing on Daixin Team’s leak site suggested serious problems for Acadian Ambulance. Acadian Ambulance offers several health-related services, including emergency medical transportation, non-emergency transportation, at-home health care, air services, and medical education. It has locations in Louisiana, Mississippi, Tennessee, and Texas. Acadian has been in business since 1971, and at this point, employees…