Cho Mu-hyun reports: The shocking figure of over 106 million privacy breaches was unveiled by a report of data leaks between 2010 to 2014 filed by the Korea Communication Commission (KCC) to the National Assembly during the yearly government audit of ministries. The figure means that each person has, on average, had his or her…
TN: Algood firefighters personal information compromised
Laura Militana reports: The first work session for Algood’s new mayor and council member turned out to be a busy one as council members discussed a troubling discovery. More than a month ago, Mayor Scott Bilbrey informed city administrator Keith Morrison about a potential problem involving identity theft, compromising the personal information of the city’s…
Ca: About 15,000 people affected in BC data breach
News1130 reports: The provincial government is admitting the personal information of about 15,000 people may have been disclosed in a data breach at the provincial Wildfire Management Branch. It says there was an unauthorized access on September 24th, and as soon as it was discovered the website was shut down. The province says a thorough…
Hacker: 2 Ivy League Schools Vulnerable to a Serious Data Breach
Byron Acohido reports; Ethical hacker Bryan Seely of Seattle-based Seely Security showed how MBIA has long been exposing details of municipal bond and investment management accounts in a way that made it easy for criminals to transfer funds from existing accounts into newly created ones they control. There’s no evidence any theft took place, only because the…
Cyberswim notifying online customers of breach at web host (UPDATED)
Uh oh. Any consumer notification template that reports a breach due to malware injection on the web host’s server and/or includes [INSERT SITE NAME HERE] doesn’t bode well, especially when the compromise lasted for more than three months before being detected. See Cyberswim‘s template notification letter, here (pdf). I don’t see any notification on their web site…
Did MCCCD leadership shut their eyes to a database security assessment for plausible deniability in litigation?
A former Maricopa County Community College District employee alleges executive leadership closed their eyes to a report on their database security conducted after their massive data breach in 2013 so they would have plausible deniability in any litigation. As a result, the employee alleges, the findings were never shared with those tasked with securing MCCCD’s data assets. In November…