The University of Georgia has issued the following release today: An ongoing investigation into what officials call “a criminal act of computer trespass” reveals that the personnel records of at least 8,500 current and former University of Georgia employees apparently were accessed by an intruder, UGA Vice President for Information Technology Timothy M. Chester announced…
Follow-up: Army slow in contacting data breach victims
Joe Gould reports: The Army has been slow to inform 31 soldiers who received the Medal of Honor and Distinguished Service Cross, or their families, that the recipients’ Social Security numbers were posted online. More than a week after the breach was made public, eight recipients of the DSC, the military’s second highest award for…
Phony Craigslist ads fueled ID theft/tax refund scheme
Timothy Bolger reports: A Rockville Centre woman has admitted stealing 250 identities in 30 states, taking more than $75,000 from her victims and fraudulently requesting over $500,000 in New York State income tax refunds. Susan Pemberton pleaded guilty Wednesday at Nassau County court to grand larceny, scheme to defraud, offering a false instrument for filing…
UK: Essex County Council ‘sensitive’ data found in building
BBC reports: An investigation is under way into how “sensitive” information belonging to Essex County Council ended up in a disused building. The security breach was one of three “recent” episodes at the Conservative-run council. The Information Commissioner’s Office has confirmed it is investigating the breaches. According to BBC, two of the breaches were “committed…
Korn/Ferry’s frustratingly vague breach disclosure (update2)
File this under “How NOT to issue a press release.” Korn/Ferry reportedly issued some statement that they were the victim of a criminal attack. They note that the databases typically do not hold credit cards, Social Security numbers or health information, but they fail to indicate what types of personally identifiable information may have been…
Failure to shred: radiology service notifies patients of potential breach (update1)
KOLR10/KOZL News reports: A Springfield medical group that provides radiology services to CoxHealth is telling its patients to watch their personal information. Litton and Giddings Radiological Associates, P.C. (LGRA) says its janitorial service inadvertently sent patient paper billing records to a Springfield recycling company without first shredding the documents. The incident involved a business associate’s…