Information security analytics

According to the preliminary findings of InfoWatch Analytical Center, in 2018, banks, finance and insurance companies managed to stop the general growth of personal, payment, and other confidential data breaches, but at the same time suffered more leaks caused by hackers. This is a digest of the top data leaks from banks, finance and insurance companies in 2018, prepared by InfoWatch Analytical Center.

This is a special digest prepared by InfoWatch Analytics Center in recognition of the International Data Privacy Day. This unusual holiday has been celebrated every year on January 28 ever since it was initiated on April 26, 2006, by the Committee of Ministers of the Council of Europe to commemorate the signing of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data on January 28, 1981.

Residents of Indio, California, who pay their water bills online became the latest group of people whose personal identifying information was potentially exposed thanks to a vulnerability in Click2Gov, an municipal bill-payment program that has been connected to more than a dozen data breaches in small and midsize cities across the country since July 2017, the website statescoop.com reports.

An estimated 105 people had their personal health information improperly accessed between 2005 and 2011, The BBC reports. A proposed settlement worth about $400,000 has been reached in a Nova Scotia class-action lawsuit relating to the improper access of patients's personal health information by an employee of the former Capital District Health Authority, according to a law firm involved in the case.

A San Antonio-based foundation has sued its former executive director and finance officer, saying the two hijacked critical passwords and computer accounts to make it impossible for the group to do its work helping Green Berets and their families, the website expressnews.com reports.

The United States has charged a Chinese spy with trying to steal trade secrets from some of the country's top aviation and aerospace companies, the portal Voice of America reports. The Department of Justice (DOJ) announced Wednesday that Yanjun Xu had been arrested on April 1 in Belgium, which then extradited him to the U.S. on Tuesday. Xu, who appeared Wednesday in federal court in Cincinnati, was indicted by a federal grand jury in the Southern District of Ohio.

Cleveland Police has admitted accidentally publishing the personal details of 1,661 people who had to be restrained by its officers, the BBC reports. The force said it mistakenly posted on its website an unredacted version of a spreadsheet detailing the "use of force" between April and June. Names, dates of birth, ethnicity, and "limited health and wellbeing" data was included, but not addresses.

Download report Full version, pdf - 1085 КБ

Veeam, a backup and data recovery company, bills itself as a data giant that among other things can “anticipate need and meet demand, and move securely across multi-cloud infrastructures,” but is believed to have mislaid its own database of customer records, The TechCrunch reports. You know what isn’t a good look for a data management software company? A massive mismanagement of your own customer data.

NCIX did not wipe or encrypt servers when it closed down and filed for bankruptcy in 2017. Their customers' data is now peddled online by Richmond-based individual, the portal ZDNet writes.