Tanya Forsheit and M. Scott Koller of BakerHostetler have a good write-up of the new provisions in California law and how the language of AB 1710 has led to some confusion as to whether California now requires breached entities to offer free credit monitoring protection for 12 months if certain types of personal information are…
On Accuracy in Cybersecurity
Derek Bambauer writes: I have a new article on how to address questions of accuracy in cybersecurity up on SSRN. It’s titled Schrödinger’s Cybersecurity; here’s the abstract: Both law and cybersecurity prize accuracy. Cyberattacks, such as Stuxnet, demonstrate the risks of inaccurate data. An attack can trick computer programs into making changes to information that are…
JPMorgan email notification to customers
Well, I nearly trashed this email as spam because the sender showed as “Gregory Quental,” with a subject line “Important update on cyber security.” I’m glad I looked at it, though, as it was a message from JPMorgan about their breach: As you may know, Chase recently was the victim of a sophisticated cyber attack….
UPDATE: JP Morgan reveals data breach affected 76 million households and 7 million small businesses
Olivia Levoy of USA Today reports: The cyberattack on JP Morgan Chase & Co. first announced in July comprised information from 76 million households and 7 million small businesses, the company revealed in a filing with the Securities and Exchange Commission Thursday. Contact information, including name, address, phone number and email address, as well as…
eCar insurance in security breach via Brightside Group
BBC reports: The Brightside Group – manager of several motor insurance websites, including eCar insurance – has identified that there was breach in its security system on 29 September. However, “the company confirms that there’s no evidence that any personal information was obtained by the perpetrator,” the firm told the BBC. Read more on BBC….
Former State of Alabama Employee Pleads Guilty to Stealing Identities from State Databases
WTVY reports: 30-year-old Tamika Floyd a resident of Salem, Ala., pled guilty to one count of conspiracy to defraud the United States and one count of aggravated identity theft for her involvement in a Stolen Identity Tax Refund Scheme (SIRF), announced Deputy Assistant Attorney General Ronald A. Cimino of the Justice Department’s Tax Division and…