ICO Issues £500,000 Fine to Facebook for Cambridge Analytica Data Scandal

The Information Commissioner’s Office (ICO) has issued a fine of £500,000 to Facebook for the the data scandal involving Cambridge Analytica. On 25 October, the ICO confirmed it had issued the fine after notifying Facebook of its intention b… Continue reading ICO Issues £500,000 Fine to Facebook for Cambridge Analytica Data Scandal

Yahoo Agrees to Pay $50 Million in Damages to Settle Data Breach Lawsuit

Yahoo has agreed to pay $50 million to help settle a lawsuit that seeks to hold the company responsible for a data breach the company suffered several years ago. On 23 October, Yahoo said it would pay $50 million and provide two years of free credit-mo… Continue reading Yahoo Agrees to Pay $50 Million in Damages to Settle Data Breach Lawsuit

Indiana National Guard Suffers Ransomware Attack

The Indiana National Guard confirmed that a ransomware attack affected some of its members’ personally identifiable information. On 18 October, the Indiana National Guard said in a statement that ransomware had infected a state-owned, non-militar… Continue reading Indiana National Guard Suffers Ransomware Attack

Dating App for Trump Supporters Exposed Members’ Information

A dating app geared towards connecting supporters of U.S. President Donald Trump exposed members’ personal and account information. On 15 October, security researcher Baptiste Robert (who also goes by the name “Elliot Alderson”) disco… Continue reading Dating App for Trump Supporters Exposed Members’ Information

Scottish Ambulance Service Exposed Employees’ Data Online

The Scottish Ambulance Service suffered a data breach in which it exposed its staff members’ personal information online. On 12 October, the NHS Ambulance Services Trust, which is part of NHS Scotland, sent an email to its staff in which it discl… Continue reading Scottish Ambulance Service Exposed Employees’ Data Online

New Sextortionist Scam Uses Email Spoofing Attack to Trick Users

A new sextortionist scam is using spoofing techniques to trick users into thinking that digital attackers have compromised their email accounts. As reported by Bleeping Computer, an attack email belonging to this ploy attempts to lure in a user with th… Continue reading New Sextortionist Scam Uses Email Spoofing Attack to Trick Users

Clarifying the Misconceptions: Monitoring and Auditing for Container Security

An effective container security strategy consists of many parts. Organizations should first secure the build environment using secure code control along with build tools and controllers. Next, they should secure the contents of their containers using c… Continue reading Clarifying the Misconceptions: Monitoring and Auditing for Container Security

Chinese Intelligence Officer Extradited to the United States for Espionage Charges

A Chinese intelligence officer has been extradited to the United States after being charged with conspiracy to commit economic espionage against certain U.S. firms. On 10 October, the U.S. government unsealed an indictment filed by a federal grand jury… Continue reading Chinese Intelligence Officer Extradited to the United States for Espionage Charges

Washington Orthopedic Practice Confirms Data Security Event

A Washington medical group practice specializing in orthopedics has notified individuals of a data security event that might have exposed some of their personal information. On 5 October, Rebound Orthopedics & Neurosurgery (“Rebound”) o… Continue reading Washington Orthopedic Practice Confirms Data Security Event

Heathrow Airport Fined £120,000 Following Data Security Incident

The Information Commissioner’s Office (ICO) issued a fine of £120,000 to Heathrow Airport Limited (HAL) following a data security incident that occurred in 2017. On 8 October, ICO announced the penalty under section 55A of the 1998 Data… Continue reading Heathrow Airport Fined £120,000 Following Data Security Incident