I just read a breach disclosure to the New Hampshire Attorney General’s Office with accompanying notification letters to those affected that impressed me favorably. But first, to the breach itself: StudentCity.com, a site that allows students to book trips for school vacation breaks, suffered a breach in their system that they learned about on June…
Sony insurer sues to deny data breach coverage
Ben Berkowitz reports: One of Sony Corp’s insurers has asked a court to declare that it does not have to pay to defend the media and electronics conglomerate from mounting legal claims related to a massive data breach earlier this year. Zurich American Insurance Co asked a New York state court in documents filed late…
The SAFE Data Act: An admirable attempt that needs expansion
Cross-posted from PogoWasRight.org: Some of the controversy yesterday over The SAFE Data Act, introduced by Rep. Mary Bono Mack, concerns the limited definition of “personal information” in terms of what would trigger a breach disclosure and notification. Although some of the arguments appeared to follow partisan lines, the issue is not a partisan one, so…
Editorial: Missing records case reveals vulnerabilities
From an editorial in the Winston-Salem Journal: The mysterious case of the missing medical records apparently has been solved, though we think it took Wake Forest Baptist Medical Center too long — six weeks — to disclose its findings. And since this most recent case is the second time in less than two years that medical records…
Now if there had been a mandatory disclosure law in the U.K….
Speaking of notifying consumers about a breach, the House of Commons – Home Affairs Committee report, “Unauthorised tapping into or hacking of mobile communications,” was released yesterday and notes how mobile operators failed their customers by not notifying them that their privacy and records had been breached: However, the companies cannot escape criticism completely. Neither…
IL: Crystal Lake District 47 sues Home State Bank to recover hacking losses
Sarah Sutschek reports on another interesting case to follow in the courts: About two years after losing more than $300,000 when its computer system was hacked, Crystal Lake District 47 is suing Home State Bank. The lawsuit, filed in McHenry County, seeks $306,014 and “whatever other relief this court deems appropriate.” According to the lawsuit,…