According to the PlayStation blog, the 70 million users of Qriocity and PlayStation Network may have had their personal information compromised due to a successful hacker attack. Also the network has been shut down since April 20th and users have been unable to download content or play online.
The hacker attack resulted in personal information such as names, home addresses, e-mail addresses, birth dates and passwords being compromised, but the damage to credit card information has not yet been assessed. Read more
According to Verizon’s DBIR (Data Breach Investigations Report) issued this year, the number of data breaches in the last years has fallen significantly, but there is still reason to remain vigilant. The numbers show a decrease from 144 million compromised records in 2009 to 4 million compromised records in 2010. The progress is even more significant if we take under consideration the progress since 2008, when 361 million records have been compromised.
This study was conducted by Verizon along with U.S. Secret Service (USSS) and the Dutch High Tech Crime Unit (NHTCU).
“With the addition of Verizon’s 2010 caseload and data contributed from the USSS and NHTCU, the DBIR series now spans 7 years, 1,700-plus breaches, and over 900 million compromised records,” said a post to the Verizon Business Security Blog that accompanied the report.
CBC News recently revealed a disturbing privacy breach that happened on March 22, when a USB memory stick, containing private information for about 7,000 employees of the Edmonton Public School Board was lost.
As a result, the school board sent letters to the affected employees, notifying them that their data may have been misused. Read more
Servers belonging to Automattic, the company which maintains the WordPress.com platform have recently been hacked via root access. The latest details regarding this breach that is still under investigation comes from an advisory from Automattic. However, the initial findings are quite unsettling for the 18 million publishers hosted by wordpress.com.
“Automattic had a low-level (root) break-in to several of our servers, and potentially anything on those servers could have been revealed,” the company’s founder, Matt Mullenweg, wrote. “We presume our source code was exposed and copied. While much of our code is open source, there are sensitive bits of our and our partner’s code. Beyond that, however, it appears information disclosed was limited.”
The accidental loss of a computer hard drive is the source of a data breach that lead the MidState Medical Center to start sending letters of notice to the 93,500 potential victims. This has been brought to the attention of the employees on Tuesday. The incident urged the office of the Connecticut attorney general and the Department of Consumer protection to demand more details and to thoroughly investigate the matter.
According to Pamela Cretella, spokeswoman for the hospital, the lost data includes patient names, addresses, birth dates, social security numbers and medical record numbers. Read more
A computer containing data belonging to Gulf residents that have filed complaints after the oil spill was lost by a BP employee. Last week BP spokesman Curtis Thomas stated that etters were sent to roughly 13,000 people whose data was stored on the lost computer. The letters notify those affected of the potential data breach and offer free credit monitoring to those who request it. The missing device has been reported to law enforcement agencies.
According to Thomas, there is no evidence that the lost personal data was misused as of yet.
“We’re committed to the people of the Gulf Coast states affected by the Deepwater Horizon accident and spill, and we deeply regret that this occurred,” he said.