Motor industry employee sentenced for data breach
A motor industry employee has been sentenced to six months in prison in the first prosecution to be brought by the Information Commissioner’s Office (ICO) under legislation which carries a potential prison sentence.
Amex India accounts exposed by misconfigured MongoDB installation
American Express account holders in India had their personal information exposed in yet another instance of misconfigured data storage, The Daily Swig can reveal. More than 689,000 unencrypted records containing names, phone numbers, emails, and card type were found publicly available on a MongoDB database belonging to the Amex India service.
CPS employee steals personal data, faces felony charges
When Chicago Public Schools fired an employee recently, she left her job with more than just her final paycheck. Police say the employee, 28-year-old Kristi Sims of Hickory Hills, allegedly took the personal information of about 70,000 people contained in a CPS private database, the portal CBS Chicago reports. Sims was a temporary employee who worked in the CPS information center, police said. She may have stolen the data in retaliation for being fired, police said.
Pentagon reveals cyber breach of travel records
According to a U.S. official familiar with the matter, the breach could have affected as many as 30,000 workers, but that number may grow as the investigation continues. The breach could have happened some months ago but was only recently discovered. The official, who spoke on condition of anonymity because the breach is under investigation, said that no classified information was compromised.
Customer data may not be secure with Arik Air
Customer data belonging to Arik Air may have leaked. An information technology expert who goes by the identity xxdesmus disclosed this in a post as well as a tweet from his handle. He said the data was found during his normal course of scanning for open/exposed/vulnerable Amazon S3 buckets, the portal nairametrics.com writes.
U.S. charges Chinese spies and hackers in trade secrets theft
The Justice Department on Tuesday unsealed charges against 10 Chinese spies, hackers and others accused of conspiring to steal sensitive commercial airline and other secrets from U.S. and European companies, The Washington Post reports.
Cathay Pacific hacked and millions of passenger data compromised
One of Asia's top airlines has discovered a data breach in which the personal information of more than 9 million passengers may have been stolen, The CNN reports. Cathay Pacific (CPCAY) said late Wednesday that a wide range of data — including passengers' names, dates of birth, phone numbers, email addresses and passport numbers — was exposed in a hack of its information systems earlier this year.
Yahoo to pay 50M dollars for massive security breach
Yahoo has agreed to pay $50 million in damages and provide two years of free credit-monitoring services to 200 million people whose email addresses and other personal information were stolen as part of the biggest security breach in history, The AP reports. The restitution hinges on federal court approval of a settlement filed late Monday in a 2-year-old lawsuit seeking to hold Yahoo accountable for digital burglaries that occurred in 2013 and 2014, but weren’t disclosed until 2016.
Bombardier sues Mitsubishi jet program over trade secrets
Canadian airplane maker Bombardier Inc has sued the aircraft unit of Japan’s Mitsubishi Heavy Industries Ltd, saying former Bombardier employees passed on trade secrets to help Mitsubishi’s oft-delayed regional jet project, The Reuters reports.
Anthem pays OCR 16M dollars in record HIPAA settlement
Anthem, Inc. has agreed to pay $16 million to the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) and take substantial corrective action to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules after a series of cyberattacks led to the largest U.S.
