Thieves Using Bluetooth To Track Laptops and Smartphones To Steal.

As you travel and shop over the holidays, keep in mind that criminals will be working overtime in ways you don’t expect. According to wired.com, incidents where thieves are using Bluetooth scanners are increasing. At least, it’s the only conclusion to be drawn in a number of cases where phones and other electronics were stolen […] read more

Rethinking Encryption: Former Anti Strong-Encryption FBI Guy Changes His Mind.

A couple of weeks ago, Jim Baker published a long article on why the US needs strong encryption. One could call this position surprising, seeing how Baker was part of the FBI’s 2016 efforts to hamstring Apple’s iPhone encryption, a consequence of the San Bernardino terrorist incident. Baker does a good job of showing why […] read more

Canada: Hospital’s Unprotected External Hard Drive Missing.

According to cbc.com and other media outlets, 650 Canadians have been affected by the theft of an external hard drive that contained medical information. The Mazankowski Alberta Heart Institute announced that the HDD “went missing” from an outpatient lab. Its disappearance is linked, most probably, to a theft that occurred on August 5 of this […] read more

Dunkin’ Donuts Sued By NY Because Rewards Program Hacked.

Dunkin’ Donuts – recently rebranded as just Dunkin’ (although they still sell donuts) – has been sued by the state of New York. According to the official complaint, Dunkin’ was hacked as early as 2015 and, instead of doing what was necessary and legal, the company decided to engage in fraud and deception. Last year, […] read more

CEOs of Tech Companies Unironically Ask Congress for Federal Data Privacy Law.

Many media outlets are reporting that the CEOs of fifty-one “tech companies” have urged the US Congress to pass a federal data privacy law. The letter itself, from the Business Roundtable, an association which includes these fifty-one companies and others, notes that: There is now widespread agreement among companies across all sectors of the economy, […] read more

Georgia Supreme Court To Decide Precedent-Setting Data Breach Case.

According to ajc.com, lawyers argued last week, in front of Georgia’s Supreme Court justices, whether the threat of future harm to data breach victims is enough to receive compensation or if actual financial losses are necessary. This is a far cry from years past, when courts used to toss out data breach lawsuits for lack […] read more

Laptop With Medical Info Missing From University of Hong Kong.

According to scmp.com, the University of Hong Kong has lost a laptop computer containing medical information on more than 3,600 people. Apparently, the laptop computer was not secured with full disk encryption software; and yet, 901 patients’ data was cryptographically protected independently. Police are currently investigating the situation. Massive Data Breach This latest episode has […] read more

British Airways, Marriot To Be Fined £183m, £99m Respectively For Data Breaches.

Earlier this week, the Information Commissioner’s Office (ICO) in the UK announced that British Airways (BA) will be fined £183 million (approximately US$228 million) for a data breach. The figure represents 1.4% of the total revenue BA earned in 2018. The airline is the first major business that has been fined under the European Union’s […] read more

HIPAA Data Breach Leads To Chapter 11 Bankruptcy For American Medical Collection Agency (AMCA).

A couple of weeks ago, Quest Diagnostics and LabCorp, two companies in the medical healthcare field, announced that they had been affected by a data breach. As it turned out, the root of the actual HIPAA data breach lay with a debt collection firm, the American Medical Collection Agency (AMCA). This week, AMCA’s parent company […] read more

Data Breach at LabCorp & Quest Diagnostics Tip of the Iceberg.

This week, two companies in the healthcare sector announced that their clients were affected by an information security breach. Both LabCorp and Quest Diagnostics were affected, and their data breaches can be traced back to AMCA (American Medical Collection Agency which also does business as Retrieval-Masters Creditors Bureau), a billing collections vendor. Many are pointing […] read more