10-Year-Long Breach at City College of S.F.

We know that approximately 5% of data breaches take years to discover. Just this month, for example, the City College of San Francisco discovered an “infestation” of computer viruses that have been leaking data for more than a decade. The investigation of the initial security flag found that an infestation of computer viruses had been [...]

Zappos Breach: Protect Your Information

Zappos recently announced that they had been the victim of a cyber attack and that their 24+ million customers would be contacted about the incident. The database accessed did not include credit card or payment data and Zappos has already performed a reset on customer passwords. The breached information included name, e-mail address, billing and shipping addresses, [...]

List of Potential APT Victims Released

Advanced Persistent Threats (APT) have been a hot topic over the last 6 months, topping priority lists, reports, and high-profile breaches. APTs refers to groups with both the capability and the intent to persistently and effectively target a specific entity. In the web sense, this means a that a specific entity will be repeatedly targeted [...]

iPad Data Breaches Have Begun

We are (unfortunately) familiar with hearing about breaches that are the result of lost laptops, computers or data tapes. Even a more recent breach affecting 4.9 million, after a government contractor left backup computer tapes in his car, seems a familiar scenario. New to the scene of data breaches, though soon to be familiar I’m [...]

Sony locks 93,000 user accounts after breach

Sony has confirmed that a fresh attack on its networks has impacted 93,000 accounts.

Sony locks 93,000 user accounts after breach

Sony has confirmed that a fresh attack on its networks has impacted 93,000 accounts.

School and union’s Data Protection Act breach ‘inexcusable’

The Information Commissioner’s Office (ICO) has reported that a school and a school union breached the Data Protection Act following the loss of laptops.

School and union’s Data Protection Act breach ‘inexcusable’

The Information Commissioner’s Office (ICO) has reported that a school and a school union breached the Data Protection Act following the loss of laptops.

HIPAA Audits Planned

In June 2011, the United States Department of Health & Human Services (HHS) Office of Civil Rights (OCR) awarded KPMG, LLP a $9.2 million contract to administer random audits of hospitals, physician practices and other healthcare entities. This is yet another indication that HIPAA enforcement is up. Audits will be random to an extent, though [...]

California Amends Breach Notification Law

We try to stay abreast of changes in breach and privacy laws. Though we won’t post details here on every new proposed National bill or every small change in State laws, sometimes a change will catch our eye. Today we read about an amendment to the California Breach Notification Law that adds some detail-rich requirements [...]