Kawana Brown, 36, of West Palm Beach, pled guilty last week for her participation in a wide-ranging identity theft scheme. Specifically, Brown pled guilty to one count of conspiracy to commit wire fraud, in violation of 18 U.S.C. ‘ 1349 (Count 1), three counts of wire fraud, in violation of 18 U.S.C. ‘ 1343 (Counts…
Pointer: Senate Commerce report on Target data breach
The Senate Committee on Commerce, Science, and Transportation released its report, “A “Kill Chain” Analysis of the 2013 Target Data Breach.” The report was prepared by the majority staff for Chairman Rockefeller.
Cerberus notifies users to reset paswords after some users’ usernames and encrypted passwords accessed
Email sent to Cerebus App users today (confirmed by Cerebus): Hi [username], Our Security Team recently discovered and blocked suspicious activity on Cerberus servers. The investigation found no evidence that your account was in any way accessed or compromised. However, the attacker(s) were able to gain access to usernames and encrypted passwords for a subset of…
How big was the Sally Beauty breach?
Although Sally Beauty acknowledges that 25,000 payment cards may have been compromised in a recently disclosed breach, Brian Krebs challenges their statement by analyzing the zip codes of card data up for sale on an underground market, rescator.so. You can read his analysis here, but the short version is that Brian speculates that all Sally Beauty…
More TD Bank insider breaches
On March 1, I blogged about numerous insider breaches TD Bank has reported in the past few years. I updated that report on March 9 with even more breaches that I uncovered via public records that were subsequently made available. Today, I received a response to a public records request to the North Carolina Attorney…
Ca: Lost hard drive with student loan data lacked password protection
Daniel Bitonti reports: A portable computer hard drive containing the personal information of more than 500,000 student loan recipients was left unsecured for extended periods of time by government employees and was not protected by a password or encryption, Canada’s top privacy watchdog says. In a report tabled in Parliament on Tuesday, interim federal privacy…