From SECNAP Alerts:
Many companies still fail to adequately manage user privileges and protect sensitive data, exposing them to the risks of data breaches, according to a Ponemon Institute study sponsored by Hewlett-Packard.
A survey of 5,500 IT professionals around the world found that more than half the organizations were still giving employees access to sensitive, confidential [...]
Nearly 20% of IT Pros Say Terminated Users Still Likely to Have Data Access
December 15th, 2011 · No Comments
Tags: Security
Large Domain Name Provider Breached, Customer Data Possibly Compromised
November 30th, 2011 · No Comments
From SECNAP Alerts:
101Domain.com appeared to suffer a security breach that “may have resulted in unauthorized access to your personal information and possibly payment information.”
According to Webhosting.info, 101domain.com has about 10,000 domain names under management.
A message by 101Domain.com to its customers explains: “We need to make you aware of a security breach that may potentially have [...]
Tags: Security
Victims Not Informed of SSNs and DOBs Exposed by Social Security Administration Errors
October 18th, 2011 · No Comments
WASHINGTON — The Social Security Administration has failed to inform tens of thousands of Americans that it accidentally released their names, dates of birth and Social Security numbers in an electronic database widely used by U.S. business groups. The federal agency has kept silent about a potentially harmful security breach of the personal data of [...]
Tags: Security
U.S. Intelligence Officials’ Contact Info Posted by Hackers
September 22nd, 2011 · No Comments
From SECNAP Alerts:
“Hardly a day goes by without some news of a major hacker attack on government and industry information systems,” it noted. The group concluded that cyberspace has become a “multi-dimensional attack space” in which “key economic and national security assets are exposed to significant threats.” – Intelligence and National Security Alliance Report published [...]
Tags: Security
Security Hole: Point of Sale Breach Undetected for Two Years
September 20th, 2011 · No Comments
Little has been reported about POS fraud since the Michaels craft store breach made headlines in May, after point of sale terminals at 90 of Michaels’ 964 U.S. stores were reportedly compromised as part of a POS-swap scam waged by an organized crime ring. But now a new payment card breach, this time striking a [...]
Tags: Security
Stanford Hospital Data Breach Exposes PHI of 20,000 for a Year Online
September 13th, 2011 · No Comments
Stanford Hospital in California has confirmed that a privacy breach led to medical information for thousands of emergency room patients to be posted online, according to the New York Times. The data for 20,000 patients, including names and diagnosis codes, remained on a commercial website for nearly a year until the breach was discovered last [...]
Tags: Security
Understanding Data Breach Prevention Called a “Full-Time Job”
September 7th, 2011 · No Comments
From SECNAP Alerts:
Enterprise data systems are proving to be porous, as a number of breaches over the past few months have affected not only large banks, but major organizations outside of financial services as well.
An August breach at Citigroup’s Japanese card unit was followed by another one in the same month, which was caused by [...]
Tags: Business Continuity and Disaster Recovery · Security
Yale Warns 43,000 of Extended Security Breach
August 26th, 2011 · No Comments
Yale University has notified about 43,000 faculty, staff, students and alumni that their names and Social Security numbers were publicly available via Google search for about 10 months. All of the victims were affiliated with Yale in 1999, and are being offered identity theft insurance and free credit monitoring services for two years, the university [...]
Tags: Security
Lessons From Vanguard Security Breach
August 24th, 2011 · No Comments
Another defense contractor’s network and data has apparently fallen to the combined skills of hackers attacking Websites under the “AntiSec” banner.
Members of hacktivist collective Anonymous have reportedly breached servers belonging to defense contractor Vanguard Defense Industries (VDI) as part of the movement to steal and publicize documents from government agencies, according to a report in [...]
Tags: Security
Citi Hacked Again – Card Data of 92,000 Japanese Likely Sold to Third Party
August 9th, 2011 · No Comments
Just over a month after Citigroup confirmed a breach of its online banking platform, a second breach affecting Citi customers has come to light. On Aug. 7, The Japan Times reported that Citi on Friday confirmed a person involved with an outside business to which Citi Cards Japan Inc. outsourced part of its operations had [...]
Tags: Security