Data Loss covers large-scale personal data loss and theft incidents. This archive combines the main list (news releases) and the discussion list.

List Archives

Latest Posts

UNC Charlotte: 350, 000 SSNs exposed in decade-long breach (fwd) security curmudgeon (May 15)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

https://www.computerworld.com/s/article/9227078/UNC_Charlotte_350_000_SSNs_exposed_in_decade_long_breach

By Jeremy Kirk
IDG News Service
May 10, 2012

Two issues exposed financial data and Social Security numbers for 350,000
people, although it is thought the information has not been abused, the
University of North Carolina at Charlotte said.

The...

Identity Theft Concerns Follow Security Breach Jake Kouns (May 15)
http://www.foxcharlotte.com/news/local/Identity-Theft-Concerns-Follow-Security-Breach-151217185.html

YORK, S.C.--York County says there could be nearly 17,000 potential
victims after a security breach.

The County Manager says a backup web server was breached last August.

The problem was tracked to a suspected hacker overseas.

York County says South Carolina and a private hosting program is now
monitoring their servers.

Experts say the...

Hackers Infiltrate Opening Ceremony's Online Boutique, Compromise Security security curmudgeon (May 15)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://blogs.artinfo.com/silhouettes/2012/05/09/hackers-infiltrate-opening-ceremonys-online-boutique/

By Ann Binlot
ARTINFO.com
May 9, 2012

We recently got hold of a piece of mail bearing bad news from the edgy
boundary-pushing boutique Opening Ceremony stating that "a hacker placed
malicious software on our website."

The letter -- dated...

DiscoverCard stores passwords in plaintext, e-mails them on request security curmudgeon (May 08)
---------- Forwarded message ----------
From: RISKS List Owner <risko () csl sri com>
Date: Fri, 4 May 2012 12:48:03 PDT
Subject: [RISKS] Risks Digest 26.81

RISKS-LIST: Risks-Forum Digest Friday 4 May 2012 Volume 26 : Issue 81

------------------------------

Date: Sun, 29 Apr 2012 23:14:26 -0400
From: Gregory Marton <gremio () acm org>
Subject: DiscoverCard stores passwords in plaintext, e-mails them on request

I just had the...

Chinese hackers steal private data from 760 firms security curmudgeon (May 08)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.thejakartapost.com/news/2012/05/08/chinese-hackers-steal-private-data-760-firms.html

The Jakarta Post
05/08/2012

China-based hackers are reportedly targeting US-based Google Inc and Intel
Corp.

An attack hackers launched on iBahn could help them access secret e-mails,
even encrypted ones, according to a US senior intelligence official...

3.2m in Mass. have had data lost, stolen security curmudgeon (May 08)
http://articles.boston.com/2012-04-24/business/31393508_1_data-breaches-card-numbers-personal-data

3.2m in Mass. have had data lost, stolen
April 24, 2012|Jenn Abelson, Globe Staff

Nearly half of Massachusetts residents have had their personal information
lost or stolen as a result of about 1,800 data breaches over the past four
years, according to a new report from the state.s Office of Consumer
Affairs and Business Regulation.

Banks,...

Global Breach: Did It Start in 2011? security curmudgeon (May 04)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.bankinfosecurity.com/global-breach-did-start-in-2011-a-4732

By Tracy Kitten
Bank Info Security
May 2, 2012

Evidence is mounting that Global Payments Inc. may have been breached
months earlier than initially reported.

One affected card issuer told BankInfoSecurity that Visa issued an updated
alert about the breach on April 26, noting that...

follow-up: Processor Warns of Hacking Trend security curmudgeon (May 01)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.bankinfosecurity.com/processor-warns-hacking-trend-a-4720

By Tracy Kitten
Bank Info Security
April 30, 2012

Over the past year, First Data, the largest payments processor in the
U.S., has seen an uptick in "trolling" - hackers sniffing networks for
remote access into point-of-sale systems that are open or loosely
protected.

The...

Hosting firm suffers 'innocent' intrusion after billing system hacked security curmudgeon (May 01)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.theregister.co.uk/2012/04/30/eukhost_billing_system_compromise/

By Brid-Aine Parnell
The Register
30th April 2012

Web-hosting firm eUKHost has been hacked by Pakistani hacking team
UrduHack, which appeared to have gained access to its billing system.

The company sent out an email to customers and announced on its website
over the weekend...

Police find 15, 400 Aussie credit cards on hacker forums security curmudgeon (Apr 30)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.itnews.com.au/News/298770,police-find-15400-aussie-credit-cards-on-hacker-forums.aspx

By Darren Pauli
iTnews.com.au
April 30, 2012

International sting hits 36 underground sites.

More than 15,000 Australian credit cards worth an estimated $3.75 million
in total were salvaged from underground hacker forums in a global police
sting.

The...

fringe: The Nightly Turbo: Phil Ivey Divorce Case Update, TwoPlusTwo Hacked, and More security curmudgeon (Apr 30)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.pokernews.com/news/2012/04/the-nightly-turbo-phil-ivey-divorce-case-twoplustwo-hacked-12535.htm

By Brett Collson
Poker News Global
April 26 2012

[...]

TwoPlusTwo Forums Hacked

The TwoPlusTwo forums went offline on Thursday, and it had nothing to do
with the flow of traffic resulting from the Full Tilt Poker developments
this week....

Hospitals seeing more patient data breaches blitz (Apr 30)
Yeah, put that sensitive data in one of the Mickey-Mouse clouds....
Its always been about making that very data easy to steal, part of the
police-state spying.

When my doctor wrote down information on a piece of paper in my file, it got locked up at night.
NO such assurances are there today. You buy HIPPA compliant software, and some nurse-aid who doesn't know anything about
computers and has a password of "nurse" is supposed to...

UK public sector accounts for bulk of data breach fines security curmudgeon (Apr 30)
http://www.bbc.co.uk/news/technology-17843371

25 April 2012 Last updated at 16:18
UK public sector accounts for bulk of data breach fines

The UK's private sector accounted for more than a third of all reported
data breaches over 11 months, but less than 1% of the resulting fines,
according to a Freedom of Information request.

The data was issued by the Information Commissioner's Office after a
request by satellite system-maker...

2 Medicaid Data Breaches, 1 Weak Link: Employees security curmudgeon (Apr 30)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.informationweek.com/news/healthcare/security-privacy/232900817

By Ken Terry
InformationWeek
April 24, 2012

For the second time in less than a month, there has been a major data
security breach at a state Medicaid agency. The South Carolina Department
of Health and Human Services (SCDHHS) discovered on April 10 that an
employee of the...

Law firms see big money in healthcare breach cases (fwd) security curmudgeon (Apr 30)
---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.csoonline.com/article/704288/law-firms-see-big-money-in-healthcare-breach-cases

By Taylor Armerding
CSO
April 16, 2012

Cybercriminals are not the only ones looking to make money from health
data breaches.

In California, where a unique state law provides for damages of $1,000 per
person per violation of the Confidentiality of Medical...

More Lists

Dozens of other network security lists are archived at SecLists.Org.