Mark S. Melodia, Steven Boranian, Frederick Lah and Melissa A. Geist comment on the AvMed breach lawsuit settlement. The AvMed breach involving a stolen laptop with unencrypted information on 1.2 million people and lawsuit have been mentioned numerous times on the companion PHIprivacy.net blog (coverage linked from here). Last week, a judge for the Southern District…
AvMed Data Breach Class Action Settlement Gets Final Approval – Payment To Be Made To Class Members Who Did Not Experience ID Theft
Mark S. Melodia, Steven Boranian, Frederick Lah and Melissa A. Geist comment on the AvMed breach lawsuit settlement. The AvMed breach and lawsuit have been mentioned numerous times on this blog (coverage linked from here). Last week, a judge for the Southern District of Florida gave final approval to a settlement between health insurance provider AvMed and…
OANDA notifies clients registered for fxPense service to change passwords
The text of a customer notification letter from OANDA, as seen on the California Attorney General’s website: We are writing to inform you of an unauthorized breach affecting some of our clients, which occurred on the morning of Monday March 3, 2014. Please note that this incident did not impact the fxTrade services, client trades or…
How the feds brought down a notorious Russian hacker
Donna Leinwand Leger and Anna Arutunyan report: Sasha Panin called himself “Gribodemon,” and his evil works in the world of cybercrime have bedeviled millions. Panin is a 20-something Russian computer whiz who until a few years ago lived in obscurity with his grandmother in this struggling riverside city. Working from a Moscow apartment, federal prosecutors…
North Dakota University System server breach; data access not evident but possible (updated)
Update of March 27: North Dakota University System official: hackers did not gain access to files with personal information. Original story: North Dakota University System issued the following statement today: Core Technology Services, the information technology arm of the North Dakota University System, has discovered and shut down suspicious access to one of the university…
NZ passport email gaffe latest in series of privacy slips
Adam Bennett reports: Hundreds of passport applicants have had their email addresses shared with other applicants in another government privacy botch-up. About 400 people applying online for passports were yesterday sent an email informing them of a system outage on the Department of Internal Affairs website. However, each recipient could see the email addresses –…