Re: complete/official list of security breach disclosures

[blitz <blitz () strikenet kicks-ass net>]

NY just enacted legislation to that effect.


At 20:02 2/1/2006, you wrote:

> It was a great idea to start this list!
>
> Maybe someone can help me.
> I have been looking for a complete list of security breach disclosures.
> While its nice to have different lists of high profile disclosures
> what would be interesting would be find out how many total disclosures
> and the distributions of size and type. The SB-1386 law in California
> requires companies to contact customers affected by breaches. I checked
> with the California  Attorney General's Office and there are no government
> records being kept there since companies are not required to contact any
> government entity. The papers report the high profile breaches -- basing
> any analysis on the media coverage would be skewed.
>
> Are there any states require public reporting of breaches?
>
> Since other states are modeling security breach laws after
> California's SB 1386 it would be great if somehow there could be a public
> reporting element added to these laws so data on all breaches can be
> collected and analyzed for fixing the right problems.
>
> Cheers! - Bill Yurcik/NCSA University of Illinois
>         <byurcik () ncsa uiuc edu>
>
>
> _______________________________________________
> Dataloss mailing list
> Dataloss () attrition org
> https://attrition.org/mailman/listinfo/dataloss

_______________________________________________
Dataloss mailing list
Dataloss () attrition org
https://attrition.org/mailman/listinfo/dataloss