RoadSafe‘s home page proclaims, “At RoadSafe, we are focused on roadway safety. Protecting people and property.” It is somewhat ironic, then, that RoadSafe employees had their data stolen on the road. As reported to the New Hampshire Attorney General on November 26th: On November 11, 2008, a laptop belonging to a RoadSafe employee was stolen…
Vonage customer data on Google Notebook
With all the advice we see these days about hardening security, this might be a good time to remember the importance of both having stringent security standards written into any contractor agreements and actually monitoring compliance with any contracts or policies. A recent breach reported by Vonage serves as a useful example. On December 23,…
Lehigh Hanson payroll data exposed on the Web
Building materials supplier Lehigh Hanson notified the New Hampshire Attorney General on December 8th of a breach involving employee payroll data. The breach began with a former employee downloading data to take with him to a new employer. The downloaded data, however, turned out to be more than just the forms and templates the employee…
Emergency Medical Associates of New Jersey security breach
On November 4th, lawyers for Emergency Medical Associates of New Jersey (“EMA”) notified the New Hampshire Attorney General’s office that in mid-July, the Secret Service had notified them that during the course of an independent investigation, the Secret Service had identified a total 27 American Express credit cards that were possibly the subject of identity…
Concern at 16 cases of lost Assembly data
Tom Bodden reports: THE Welsh Assembly Government has confirmed that 16 cases of official data have been lost or stolen in the last three years. Ten of the losses of material, classed as “medium to low risk”, took place this year, according to details released under the Freedom of Information Act. Missing information deemed “medium…
Malware blamed in latest SAIC breach
Science Applications International Corporation (“SAIC”), recipient of a number of large government contracts, notified the New Hampshire Attorney General on December 9th of a security breach involving malware. The specific malware was not named, but was described as “designed to provide backdoor access.” The breach was detected on October 28th. In its letter to an…