David E. Sanger and John Markoff report: Almost two years after outlining a broad strategy intended to strengthen the security of the nation’s computers and networks, the Obama administration said Thursday that it was sending proposed legislation to Congress that would strengthen penalties for any invasion of private computer systems. But the White House, in…
Insurance Letter Reveals Private Information
Bob Hansen reports: Before Michael Winter could open his mail, he was shocked by what he found on the envelope. “You know they have no right,” said Winter after finding his social security number printed on the front of an envelope mailed to him from Anthem Blue Cross. The number was printed just above his…
Eidos and Deus Ex sites hacked, personal data acquired?
Brian Krebs reports that Eidos Interactive and one of its biggest titles — Deus Ex– have been hacked and some user information accessed or acquired: KrebsOnSecurity.com obtained an archived copy of the attackers’ online chatter as they were covering their tracks from compromising the sites. A hacker using the alias “ev0″ discusses having defaced the…
President’s cybersecurity agenda includes proposed federal data breach notification law
To cut to the chase: you can read the language of the proposed data breach notification law here. Sadly, the proposed language allows entities NOT to notify affected individuals if they conduct a risk assessment and determine that there is no risk to those whose data were breached. Other problems I see on a first…
OH: Laptop with financial information stolen from the home of state Auditor’s Office employee
Reginald Fields reports: A state-owned laptop containing some financial audits of public offices in northwest Ohio was stolen this week during a burglary at a house in Findlay. It was the home of a regional auditor for the state Auditor’s Office. The employee, whose identity has not been released, was suspended for 15 days because…
Sony notifications to New Hampshire Attorney General’s Office
Although there doesn’t seem to be anything new in them, if you’re curious, you can see Sony’s breach notifications to New Hampshire of April 26 and May 2.