Articles about data breach

Facepalm, photo via Shutterstock

Ex-staffer of UK.gov dept bags payout after boss blabbed medical info to colleagues

A Manchester man has won his case against former employer the Department for Work and Pensions, after a superior shared “highly private” medical information with his colleagues. Aftab Marchant, who worked in the DWP’s Stockport office, has reportedly received a substantial payout in the case – for which he was claiming damages …
Rebecca Hill, 29 May 2018

Brit doctors surgery fined £35k over medical data fumble

Bayswater Medical Centre (BMC) in London is licking its wounds after taking a not insignificant punch to the wallet for discarding highly sensitive medical information in an empty building for a year and a half. bloody knife surgeon NHS Barnet reveals 187 breaches of personal data READ MORE The Information Commissioner's …
Paul Kunert, 24 May 2018
Graduation ceremony with class clown

Greenwich uni fined £120k: Hole in computing school site leaked 20k people's data

The UK's Information Commissioner has slapped a £120,000 fine on the University of Greenwich after a security cockup by its computing and maths school compromised the data of almost 20,000 individuals. The incident occurred after an academic and a student from the then devolved department developed a microsite to facilitate a …
Kat Hall, 21 May 2018
A Ransom Note

Family Planning office warns customers private parts may be exposed

The Australian State of New South Wales' reproductive and sexual health organisation Family Planning NSW has advised users of an April 2018 ransomware attack that may have compromised sensitive information. The agency apparently retained web form messages on the public-facing server, meaning if its database was breached, …
Data breach

Equifax reveals full horror of that monstrous cyber-heist of its servers

Equifax has published yet more details on the personal records and sensitive information stolen by miscreants after they hacked its databases in 2017. The good news: the number of individuals affected by the network intrusion hasn't increased from the 146.6 million Equifax previously announced, but extra types of records …
Canada

Hacking charge dropped against Nova Scotia teen who slurped public records from the web

Cops in Halifax, Nova Scotia, Canada, will not pursue charges against a 19-year-old fella who had dared to download a cache of public documents. In a brief statement issued Monday, police said that, following nearly a month of investigation, there were "no grounds to lay charges" in a case that had drawn harsh criticism from …
Shaun Nichols, 7 May 2018

Twitter: No big deal, but everyone needs to change their password

Twitter is ringing in World Password Day by notifying its users, all 330 million of them, that their login credentials were left unencrypted in an internal log file and should be changed. Chief technology officer Parag Agrawal broke the news on Wednesday that its internal team had found that, while passwords are usually stored …
Shaun Nichols, 3 May 2018
Burning money, photo via Shutterstock

Exposing 145m Equifax customer deets: $240m. Legal fees: $28.9m. Insurance: Priceless

The Equifax mega-hack has cost the credit reporting agency well north of $200m to date, according to a financial filing for calendar Q1. In September 2017, Equifax 'fessed up to a breach that exposed the data of more than 145 million people. The cost of the breach in the latest full quarter ended 31 March was $68.7m, taking …
Rebecca Hill, 27 Apr 2018

Yahoo! fined! $35m! for! covering! up! massive! IT! security! screwup!

The Disaster Formerly Known as Yahoo! has been fined $35m by US financial watchdog, the SEC, for failing to tell anyone about one of the world's largest ever computer security breaches. Now known as Altaba following its long, slow and painful descent in irrelevance, Yahoo! knew that its entire user database – including …
Kieren McCarthy, 24 Apr 2018
Doctor Nick Riviera

Oh, baby! Newborn-care website leaves database of medics wide open

A US healthcare company seemingly exposed on the public internet contact information for roughly 10,000 medical professionals. IT pro Brian Wethern said he warned Health Stream nine days ago that one of its now-removed websites had left a database of users out in the open, allowing anyone to slurp the first and last names of …
Shaun Nichols, 20 Apr 2018
letters stuffed in a mailbox. Photo by SHutterstock

Eight months after Equifax megahack, some Brits are only just being notified

Some of the 15 million Britons affected by the Equifax mega-hack are only now receiving letters notifying them that they were affected by the breach, eight months after the event. As we reported in September 2017, Equifax confessed to having been hacked, upping the number of affected people in the following weeks to a 145 …
Gareth Corfield, 19 Apr 2018

Millions of scraped public social net profiles left in open AWS S3 box

US social network data aggregator LocalBlox has been caught leaving its AWS bucket of 48 million records – harvested in part from public Facebook, LinkedIn and Twitter profiles – available to be viewed by anyone who stopped by. Security biz Upguard wandered by on February 18, and found the publicly accessible files in a …
Thomas Claburn, 19 Apr 2018

Hop to it, bunnies: TaskRabbit breach means new passwords

IKEA's TaskRabbit app and Website, which links buyers with people skilled with Allen key experts and other errand-runners, remain offline a day after the company announced a data breach. Ominously, the operation's announcement (currently in place of its home page) advises users that if they re-use their username or password on …
Doctors in a busy hospital

UK health service boss in the guts of WannaCry outbreak warns of more nasty code infections

The UK's National Health Service has learned from last year's WannaCry attack – and started putting in place disaster recovery measures that will allow it to maintain services in the face of an even fiercer assault. The worldwide spread of WannaCry last May hit hospital networks particularly hard and left doctors and nurses …
John Leyden, 13 Apr 2018
Woman accidentally kicks over bucket of popcorn in cinema

From Bangkok to Phuket, they cry out: Oh, Bucket! Thai mobile operator spills 46k people's data

TrueMove H, the biggest 4G mobile operator in Thailand, has suffered a data breach. Personal data collected by the operator leaked into an Amazon Web Services S3 cloud storage bucket. The leaked data, which includes images of identity documents was accessible to world+dog before the mobile operator finally acted to restrict …
John Leyden, 13 Apr 2018
Someone in an Uber ride

Uber hid database hack from FTC while FTC probed Uber for an earlier database hack

Uber hid a database hack from America's Federal Trade Commission (FTC) while the very same watchdog was investigating Uber for a separate database hack, it was revealed on Thursday. The taxi app maker reached a settlement with the FTC in August 2017 after the biz allegedly "deceived consumers about its privacy and data …
Kieren McCarthy, 12 Apr 2018
Man exasperated after being on hold for a long period of time. Photo by Shutterstock

Where's my free monitoring service, One Plus? – hacked-off customers

“We have been working with partners across the world and activated credit monitoring across a number of countries. We’re working to ensure it’s available to as many people as possible, and have been assured that the last customers will receive their credit monitoring in the coming days.” OnePlus customers are still waiting for …
Andrew Orlowski, 12 Apr 2018
great westren railway ticket + train

Great Western Railway warns of great Western password reuse: Brits told to reset logins

Great Western Rail is urging all customers to change their GWR.com passwords after miscreants gained access to strangers' accounts over the last week. The British train company said circa 1,000 accounts were directly affected out of more than a million, and has written to those customers and the UK Information Commissioner's …
Kat Hall, 11 Apr 2018

Create a news alert about data breach, or find more stories about data breach.

Biting the hand that feeds IT © 1998–2018