Information security analytics

Polling firm's hack exposes Republican donor records
The data was stolen just after the 2016 election, the polling outfit confirmed. A Republican phone polling firm has been hacked, exposing data on hundreds of thousands of Americans who submitted donations to political campaigns, ZDNet has learned.
Millions of citizens’ data sold Online in Hangzhou, police find
Company that managed government health center’s website sold personal information to educational agencies and insurance firms, The Sixth Tone writes. Police in eastern China have arrested 39 people suspected of illegally obtaining and selling the personal information of millions of citizens, raising concerns about online security and privacy.
Former police officer jailed
A former police officer and a law firm employee have been sentenced after they were convicted of conspiring to sell personal data from traffic accident logs, the web-site of the Lancashire police reports.
Vt. Reaches Health-Care Exchange Vendor Data Security Settlement
Technology company SAManage USA Inc. Sept. 29 agreed to pay $264,000 to Vermont to settle claims it failed to protect Social Security numbers associated with the state’s health-care exchange, The Bloomberg BNA reports.
5,400 Customers Affected in Cyber Attack on Health Portal of AXA
The personal information of around 5,400 present and former customers of AXA insurance, company of French Life Insurance, in Singapore got stolen in one cyber attack, spamfighter.com writes.
Lawsuit alleges city exposed personal info of 3,700 employees
Private information — including medical records and salaries — of more than 3,700 City of Calgary employees was shared with another municipality, a class-action lawsuit claims. In a statement of claim filed in Calgary Court of Queen’s Bench, the law firm Higgerty Law is seeking an estimated $92.9 million in damages against the city, The Calgary Herald reports.
Sonic Drive-In breach affects millions of cards
Sonic Drive-In, a fast-food chain with nearly 3,600 locations across 45 U.S. states, has acknowledged a breach affecting an unknown number of store payment systems. The ongoing breach may have led to a fire sale on millions of stolen credit and debit card accounts that are now being peddled in shadowy underground cybercrime stores, KrebsOnSecurity has learned.
Passwords for 540,642 GPS vehicle tracking devices leaked online
SVR Tracking failed to protect passwords and other sensitive data on an AWS S3 bucket, causing over a half million vehicle tracking devices to be exposed to the public, the CSO informs.
Police reveal the biggest leakers of personal data
Four people have been arrested for allegedly illegally acquiring and dealing in more than 11 million items of personal information, police said. Two of the four have since been bailed, The Shanghai Daily informs.
Large-scale data breach and fraud trial begins in Sweden
A startup, four banks and a superstore are understood to be among a number of organizations hit by a Swedish hacking and fraud attack that has now led to trial. Swedish prosecutors declined to reveal the exact number of suspected victims in the case, The Local reports. Eight people face trial in connection with the case, which involves at least 40 million kronor ($5 million).
l.12-.057c.834-.407 1.663-.812 2.53-1.211a42.414 42.414 0 0 1 3.345-1.374c2.478-.867 5.078-1.427 7.788-1.427 2.715 0 5.318.56 7.786 1.427z" transform="translate(-128 -243)"/>