Another case of a disgruntled terminated employee seeking revenge. Douglas James Duchak was sentenced to prison for injecting malicious code into a TSA computer after he was terrminated. No personal data compromised, but the potential was there. You can read about the case on The Gazette.
UConn Customer Database Hacked (updated)
Bob Connors reports: UConn is warning thousands of customers who bought items on it’s HuskiesDirect.com HuskyDirect.com website that their personal information may have been exposed in a data security breach. A hacker obtained access to the HuskiesDirect.com HuskyDirect.com database containing billing information for 18,000 customers. The website is used by people to buy sports gear from…
CA: Two sentenced for gas station identity thefts
To follow up on a case previously covered on this blog in March and October, this report from Mark Anderson of the Sacramento Bee: A gang that used card readers to skim personal information at gas station card readers in Northern California was busted for identity theft, and two of the four were sentenced to…
Ca: Boy hacked into Catholic school board’s computer
Another Canadian school has been caught with its security pants down, it seems, after some security protections were not reactivated following a server upgrade. Kennedy Gordon reports: The Catholic school board took action after learning a young hacker had accessed confidential records — action due in part to the boy’s parents. John Mackle, education director…
Victim numbers continue to climb in EVG Quality breach
From today’s Los Angeles Times: Police have identified 380 victims of credit or debit card fraud at a Sierra Madre gas station with losses exceeding $109,000, Police Chief Marilyn Diaz said Monday. […] “The fraudulent charges arising from credit and debit cards used at the EVG station are showing up both as EVG charges and…
NC: OCR clears hospital of charges in HIPAA complaint, patient sues
Emily Ford reports that although OCR found no violation of HIPAA’s Privacy Rule, a patient at the Rowan Regional Medical Center has filed a lawsuit against the center, alleging privacy violations. Rowan Regional Medical Center will undergo voluntary corrective action next month after a former patient filed a privacy complaint against the hospital. Federal investigators…