On January 25, when an ING customer discovered that she could access client information on the ingfunds.com web site, she notified her stockbroker. In investigating the situation, ING discovered that since August 2008, a file containing the names, addresses, Social Security numbers, and account numbers of 106 ING shareholders had been available on the web…
UK: East Lancashire councils in data protection mix-up
Sam Chadderton reports: Two East Lancashire Councils have been accused of unlawfully processing personal details after a data protection mix-up. Hyndburn Borough Council and Ribble Valley Borough Council both failed to renew registrations with the Information Commissioner’s Office (ICO) register of data controllers. Any organisation using personal information about the public must be registered. It…
(follow-up) Max Ray Vision sentenced to 13 years, $27.5 million restitution
Joe Mandak of the Associated Press reports that Max Ray Vision, who had more than 1.8 million stolen bank and credit card numbers on computers at his California apartment when he was arrested in 2007, has been sentenced to 13 years in federal prison and ordered to pay $27.5 million in restitution. Previous coverage of…
IN: 9 claim tax return ID theft
WBBM reports: The IRS and police in northwest Indiana are looking into allegations of identity theft of people who claimed someone had filed tax returns for them before they filed their own returns. There are nine people who have filed identity theft complaints with the East Chicago, Ind. police department. The Northwest Indiana Times reports…
FL: District investigates computer security breach
The Associated Press reports: The Broward County School District in South Florida is investigating whether students at several schools were able to change grades by hacking into computers. The district said Thursday it had found “several security breaches” with school computer systems. A district spokeswoman told the South Florida Sun-Sentinel officials aren’t sure how many…
Employee Misuse of Computer Access Ruled Not a Crime
Mary Pat Gallagher reports: Using a password-accessed workplace computer in violation of company rules or policies may get you disciplined, but it’s not enough to be prosecuted in New Jersey, says a Mercer County judge in a published case of first impression. Superior Court Judge Mitchel Ostrer threw out an indictment against Princeton Borough police…