DFS Investigation Found Wide-Ranging and Long-Standing Failures in Coinbase, Inc.’s Anti-Money Laundering Program, Including with Regard to its Know Your Customer/Customer Due Diligence, Transaction Monitoring, and Suspicious Activity Reporting Systems, Among Others Settlement Requires Coinbase to Pay $50 Million Penalty and to Invest an Additional $50 Million in its Compliance Program From the NYS Department…
A government watchdog spent $15,000 to crack a federal agency’s passwords in minutes
Zack Whittaker reports: A government watchdog has published a scathing rebuke of the Department of the Interior’s cybersecurity posture, finding it was able to crack thousands of employee user accounts because the department’s security policies allow easily guessable passwords like ‘Password1234’. The report by the Office of the Inspector General for the Department of the Interior, tasked with oversight…
Maryland State Trooper leaked information to drug distributor, affidavit alleges
Troy Pope reports: A Maryland State Trooper was arrested after investigators say he tipped off a drug distributor, taking money for the information. The trooper has been identified as Justin Riggs, a 10-year veteran of the Maryland State Troopers. Read more at WUSA9, keeping in mind that people are innocent until proven guilty.
Captify’s Your Patient Advisor advises more than 244,000 consumers of payment card breach
Your Patient Advisor by Captify started notifying people in mid-December of a security breach that occurred in 2019 and continued for years. Captify Health (“Your Patient Advisor”) is an online retailer of colonoscopy preparation kits. In March of 2021, they were contacted about the fraudulent use of consumer credit cards potentially related to their payment…
Identity Thieves Bypassed Experian Security to View Credit Reports
Brian Krebs reports: Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian’s…
Email Reveals AR-15 Pistol Brace Company Hit With Data Breach Ahead Of ATF Ruling
Tyler Duden reports: SB Tactical, one of the most popular AR-15 pistol brace manufacturers, appears to have been hit with a data breach, where customer data, including names, addresses, and credit card information, was leaked online. A snapshot of an email from SB Tactical’s customer support has surfaced on Reddit and Twitter in the last few days…