UMass Will Pay $650,000 to Settle Potential HIPAA Violations

“The University of Massachusetts Amherst (UMass) has agreed to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules stemming from a malware infection back in 2013. The settlement includes a corrective action plan and a monetary payment of $650,000, which is reflective of the fact that […]

Flood of Threat Data Overwhelming Security Operations Center Managers

“In the modern cyber-security landscape, security vendors have been pushing the idea of visibility and alerting tools to help improve enterprise security. According to Intel Security’s McAfee Labs Threat Report for December 2016, many of the alerts that security tools are generating might be for naught as 93 percent of respondents admitted that they are […]

Most Businesses Pay Off Ransomware Attackers, IBM Study Finds

“The threat of ransomware has been top of mind for many security vendors and IT organizations throughout 2016. In an attempt to help quantify how different segments of the IT market view ransomware, IBM Security’s X-Force research group conducted a study that received responses from 1,021 consumers and 600 business leaders in the United States. […]

Yahoo says hackers stole information from over 1B accounts

https://upload.wikimedia.org/wikipedia/commons/a/aa/YAHOO_headquarters.jpg

“Yahoo says it believes hackers stole data from more than one billion user accounts in August 2013, in what is thought to be the largest data breach at an email provider. The Sunnyvale, California, company was also home to what’s now most likely the second largest hack in history, one that exposed 500 million Yahoo […]

Quest Diagnostics says 34,000 customer accounts hacked

“Medical laboratory operator Quest Diagnostics Inc. says a hack of an internet application on its network has exposed the personal health information of about 34,000 people. The Madison, New Jersey-based company says “an unauthorized third party” on Nov. 26 gained access to customer information including names, dates of birth, lab results and in some instances, […]

PCC sends blast email without hiding recipient email addresses

“The Psychological & Counseling Center sent an email out to 468 of its clients on Nov. 10 without blocking the recipients from seeing each other’s names. The content of the email was a satisfaction survey regarding the student’s recent visit to the center. Several students responded to all recipients of the email with sarcastic and […]

Physician offices hit with penalties for HIPAA violations

“Pediatricians in office practices who believe they don’t need to worry about privacy and security investigations related to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) had better think again. HIPAA enforcement has begun exposing all covered entities (e.g., physician offices, clinics, hospitals, etc.) to civil and criminal penalties if proper administrative, technological […]

FriendFinder Data Breach Exposes 400 million+ Accounts

“FriendFinder Networks is a company in the adult entertainment, social networking, and online dating space. Several databases from FriendFinder Networks web sites with more than 412 million accounts, including usernames, e-mails, and passwords, have been breached and leaked. November reports of this data breach on The Verge, LeakedSource and TechCrunch, to name a few, describe […]

Dailymotion Advises Password Change After Possible Data Breach

“Breach not yet confirmed, but LeakedSource says it has compromised IDs of over 87 million Dailymotion users, protected by bcrypt. LeakedSource has added to its search index the passwords of Dailymotion users who were apparently compromised in October, possibly because of an insecure web application, reports Help Net Security. This includes more than 87 million […]