Jay Meisel reports: Between 400 and 500 residents of Highlands County may have been defrauded of millions of dollars because of identity theft, Highlands County Sheriff Susan Benton said Monday. Benton said the investigation of that possible fraud has targeted five suspects, three of whom were former employees of Highlands Regional Medical Center. Most of…
FTC vs. LabMD hearing starts
Opening statements were held today in FTC vs. LabMD, one of only two data security enforcement cases that have not resulted in a consent order to settle charges. FTC attorney Alain Sheer provided the overview of the FTC’s complaint, alleging that LabMD failed to have a reasonable and appropriate data security program. He was only just into his…
Additional details on Los Robles Hospital breach
On May 10, I had noted a breach involving Los Robles Hospital and Medical Center in Thousand Oaks, California. HHS’s public breach tool had indicated that an incident involving their business associate, Courier Express, had resulted in the notification of 2,523 patients. A hospital spokesperson kindly called me to respond to the e-mail inquiry I had…
Court Ventures/U.S. Info Search/Experian breach tied to more cases of ID theft
Trot on over to KrebsOnSecurity.com, where Brian’s connecting the dots between a number of criminal prosecutions and Ngo, the Vietnamese national who posed as a Singapore investigator to get a Court Ventures account that gave him access to reports in U.S. Info Search’s database. Experian subsequently acquired Court Ventures, and Ngo’s account was allowed to continue…
The MCCCD breach: Breach costs now approach $20 million
Mary Beth Faller reports that breach costs for the Maricopa County Community College District (“MCCCD”) breach continue to rise: The Maricopa County Community College District governing board has approved an additional $2.3 million in lawyers’ fees to deal with the computer-security breach that occurred last year. The board also approved spending $300,000 to deal with…
UK: University of Nottingham mistakenly sends e-mail containing personal details of job applicants
Marcus Boocock reports: Confidential details of thousands of job applicants were mistakenly sent via e-mail by the University of Nottingham. An attachment sent to users of the university’s job site contained the names of 4,751 people who had applied for a job there. It also listed whether they had been successful. A spokesman for the…