Charges have been filed in New York against 37 defendants, in 21 separate cases, for their roles in global bank fraud schemes that allegedly used hundreds of false-name bank accounts to steal over $3 million from dozens of U.S. accounts that were compromised by malware attacks. According to Complaints unsealed today in Manhattan federal court,…
Article: Data Protection and Data Security Issues Related to Cloud Computing in the EU
Lawyer Paolo Balboni of the European Privacy Association, Italian Institute for Privacy, and Tilburg University has an article that has been made available on SSRN. Here’s the abstract: We are in the midst of a revolution within computing. It goes under the name of cloud computing. Analysts estimate that in 2012, the size of the…
Update on my FOI request to HHS/OCR for breach reports
I received a phone call from OCR this morning to discuss my FOI request for the breach reports HHS is receiving under HITECH regulations. I had requested electronic copies of the reporting forms breached entities submitted via HHS’s web site. The conversation was a bit of an eye-opener for me. First, it turns out…
PCI Vendor Offers $100K For Any Customer Breached
Evan Schuman writes: With all of the PCI shell games around, it’s nice to find one vendor offering what seems to be a legitimate PCI insurance program: Use its package and get breached, and the vendor will reimburse some of your out-of-pocket breach costs, with a $100,000 cap. The program, from a company called BHI…
UK: BT embroiled in ACS:Law porn list breach
Daniel Emery reports: BT has admitted it sent the personal details of more than 500 customers as an unsecured document to legal firm ACS:Law, following a court order. The news could put BT in breach of the Data Protection Act, which requires firms to keep customers’ data secure at all times. The e-mails emerged following…
OSU calls breaches of data minor
Encarnacion Pyle follows up on a recent student news story that Ohio State University has about 10 breaches per year with some additional details: […] Ohio State has checked into six possible cases in the past year and found four minor breaches in which the names and Social Security numbers of employees or current and former…