Over at bna.com, Bloomberg Law reminds us that there are a number of “legal battles over workplace cybersecurity being waged” in the USA. For example, ENSLIN v. THE COCA-COLA COMPANY ET AL, which has been ongoing since 2014. The breach was covered here and here previously, and the short version is: A Coca-Cola employee stole […] read more
Penn Medicine has revealed this past week that a laptop computer with protected health information (PHI) was stolen on November 30. While the details are meager (aside from a short entry at philly.com, which is referenced by databreaches.net, an online search comes up empty), the following was revealed: About 1000 people were affected. The laptop […] read more
One of the FBI’s most controversial cases in recent memory – where hundreds have been charged after getting caught in an online pedophilia sting – has been producing contentious rulings in US courts. Due to the nature of the case, the courts have been issuing contradictory rulings and opinions, testament to the inchoate nature of […] read more
According to arstechnica.com and other sources, a Philadelphia man has been jailed for over seven months, with no end in sight, because he claims he forgot the password to two encrypted disk drives. His lawyer has appealed, noting that the Fifth Amendment provides protection from forced decryption. Furthermore, he says, the government has failed to […] read more
Usually, the end of life for a software solution tends to be its death knell. It may resurface years later in the popular media, usually on a specific anniversary: its 20th year since making its initial splash, its 30th year since it stopped selling, etc. TrueCrypt, the celebrated full disk encryption solution, appears to be […] read more
One of the things you quickly learn when you work for a data security company is that data security doesn’t work the way normal people think it does. For example, “normal people,” apparently, think that they can somehow get off the leaked Ashley Madison list, the latest data breach story du jour: Now that the […] read more
One of the worst US states in which to have a data breach, especially a medical data breach, is probably California: in addition to federal HIPAA regulations, California has shown itself to be quite aggressive when dealing with medical entities that experience a data breach. Indeed, there’s some (valid) criticism that the CA Dept. of […] read more
HIPAA Disk Encryption: Why Would You Authorize Employees To Work From Home Without Encrypting Patient Data?.
According to wreg.com, patients at the Boston Baskin Cancer Foundation recently learned they were potential victims of a data breach. This is one of those cases where one is left wondering if administrators thought things through: HIPAA encryption software was not used on a data storage device that comprised six years worth of patient data; […] read more
There are brazen thieves and then there is this guy: video footage from a security camera obtained by krgv.com shows a middle-aged man leisurely strolling back to his stolen truck with a stolen computer under his arm. It’s because of instances like these that the use of HIPAA-grade disk encryption like AlertBoot’s managed encryption services […] read more
Lawyer Laptop Encryption: San Francisco Attorney Notifies Clients of Laptop Theft, Potential Data Breach.
A data breach can be a devastating experience. Even more so if the breach involves a particular profession where privacy, anonymity, and secrecy happen to be paramount. That’s why a medical data breach hits people more closely than a retailer’s data breach. And why a data breach involving the legal profession seems even more alarming. […] read more