I think it would be fair to say that Kierkegaard & Perry Labs, Inc’s breach notification to Maryland in July impressed me somewhat unfavorably. KPL was reporting a hack that had compromised some customers’ names, addresses, and credit card numbers with expiration dates and CVV codes. Their investigation revealed that 8 customers’ information was acquired (not…
MO HealthNet/InfoCrossing breach much longer and larger than previously recognized
The MO HealthNet mailing error breach due to a software error by its Business Associate InfoCrossings was much bigger than originally reported, it seems. Maria Altman reports: Personal information for more than 25,000 Missourians in the state’s managed health plan went out to the wrong mailing addresses. The Department of Social Services announced Monday that…
This hacker might seem shady, but throwing him in jail is bad for everyone
Timothy B. Lee writes: On Friday, the U.S. government filed its brief in the appeal of Andrew “Weev” Auernheimer, who was convicted of federal hacking charges for downloading hundreds of thousands of customer e-mail addresses from AT&T’s Web site. The government says the conviction was proper, but many security researchers and civil liberties advocates argue that the…
Mandatory Data Breach Notice Bill Stalls As Canadian Parliament Session Closed
Peter Menyasz reports: The Canadian government’s Sept. 13 decision to end the Parliament’s legislative session has at least temporarily blocked passage of proposed amendments (Bill C-12) to Canada’s framework federal privacy law that would have introduced a limited mandatory data breach notification requirement. A new parliamentary session is scheduled to start Oct. 16, and the…
Equity Trust Company hacked from overseas IP addresses
A breach involving Equity Trust Company in South Dakota also flew under the media radar this year, it seems. In a letter dated April 16 to the Maryland Attorney General’s Office, Michael Dea, President of the Ohio-headquartered firm, writes that at the end of January, they discovered that part of their network had been accessed…
U.S. FDA issues final rules on mobile medical apps
Toni Clarke reports: The U.S. Food and Drug Administration has issued final rules governing the development of mobile medical apps, saying it will focus its oversight on those products that have the potential to harm consumers if they do not function properly. The rules, announced on Monday, come more than two years after the FDA…