Category Archives: Equifax

Equifax CISO Jamil Farshchi’s three-act, ‘shared fate’ security plan

Posted on by

Even in normal times, credit reporting agencies are never among the world’s most admired companies. So it’s easy to see why Equifax’s brand reputation has suffered immensely thanks to the massive breach that saw information on 148 million people taken from the company and two former executives charged with insider trading. New Equifax CISO Jamil Farshchi is working to overcome the “visceral” reaction he’s witnessed post-breach. A veteran of massive rehabilitation efforts via his time spent as CISO at Home Depot, Farshchi is embarking on a plan to move Atlanta-based Equifax beyond its security lapses to a position where the company is actually seen as security leader. In an exclusive interview with CyberScoop, Farshchi describes his “three-act plan” to secure Equifax, which includes having the entire company understand that cybersecurity doesn’t fall to the IT division. “Security isn’t just security’s job,” he said. “Everyone needs to feel it through and […]

The post Equifax CISO Jamil Farshchi’s three-act, ‘shared fate’ security plan appeared first on Cyberscoop.

Continue reading Equifax CISO Jamil Farshchi’s three-act, ‘shared fate’ security plan→

Second former Equifax staffer charged with insider trading

Posted on by

In another entry for the ‘what were they thinking’ file, a second former Equifax executive has been charged with insider trading in advance of the company’s massive data breach announcement last September. Continue reading Second former Equifax staffer charged with insider trading→

The Shared Security Weekly Blaze – New WPA3 Wireless Standard, Malicious Smartphone Batteries, Exactis Data Leak

Posted on by

This is the Shared Security Weekly Blaze for July 2nd, 2018 sponsored by Security Perspectives – Your Source for Tailored Security Awareness Training and Assessment Solutions, Silent Pocket and CISOBox.  This episode was hoste… Continue reading The Shared Security Weekly Blaze – New WPA3 Wireless Standard, Malicious Smartphone Batteries, Exactis Data Leak→

Former Equifax employee charged with insider trading over 2017 data breach

Posted on by

The Securities and Exchange Commission accused a former Equifax employee of trading on confidential information in advance of the public announcement of the company’s 2017 data breach that impacted 148 million people. Equifax software engineering manager Sudhakar Reddy Bonthu is charged with taking and trading on the confidential information he received when he created a website for consumers impacted by the breach. Prosecutors say that Bonthu earned over $75,000 on his trading, a 3,500 percent return on his investment after Equifax’s stock fell 14 percent. He was fired in March after refusing to cooperate with an internal Equifax investigation. “As we allege, Bonthu, who was entrusted with confidential information by his employer, misused that information to conclude that his company had suffered a massive data breach and then sought to illegally profit,” said Richard R. Best, Director of the SEC’s Atlanta Regional Office.  “Corporate insiders simply cannot abuse their access to sensitive information […]

The post Former Equifax employee charged with insider trading over 2017 data breach appeared first on Cyberscoop.

Continue reading Former Equifax employee charged with insider trading over 2017 data breach→

Pennsylvania, Equifax, and US Senators – Paul’s Security Weekly #564

Posted on by

 In the Security News this week, Smart lock can be hacked in seconds, librarian sues Equifax over 2017 data breach wins $600, Neighbors of Cold War Air Force deserter knew him as ‘Tim’. In the random and potentially interesting stories, a … Continue reading Pennsylvania, Equifax, and US Senators – Paul’s Security Weekly #564→

Capitol Hill staffers learn what really happens when there’s a data breach

Posted on by

In the past three years, U.S. lawmakers have struggled to nail down key details of how two of the biggest data breaches in history affected the public and private sectors. “How far back does your information database go that was compromised?” former Utah Rep. Jason Chaffetz demanded of then-Office of Personnel Management director Katherine Archuleta at a June 2015 hearing. Chaffetz berated Archuleta for failing to secure OPM’s IT systems, from which alleged Chinese hackers extracted data on 22 million current and former federal workers. “I just hope we get to the bottom of this…because this is a mess,” Rep. Ben Ray Luján, D-N.M., said in October after questioning former Equifax CEO Richard Smith on when he knew hackers had struck the credit-reporting firm. The breach compromised data on 148 million people. To try to demystify future breach-related discussions on Capitol Hill, cybersecurity firm FireEye held a quiet training session for roughly […]

The post Capitol Hill staffers learn what really happens when there’s a data breach appeared first on Cyberscoop.

Continue reading Capitol Hill staffers learn what really happens when there’s a data breach→

Vermont librarian scores symbolic $600 win against Equifax in small claims lawsuit

Posted on by

In the wake of the Equifax incident last year, more than 143 million people had their personal and financial information leaked by hackers. For one 49-year-old librarian in Vermont, simply watching the company’s image get tarnished would not suff… Continue reading Vermont librarian scores symbolic $600 win against Equifax in small claims lawsuit→

DNA Testing Service MyHeritage Leaks User Data of 92 Million Customers

Posted on by

An unspecified “private” server was found with the account data of users who signed up for the service, in the largest breach since Equifax last year. Continue reading DNA Testing Service MyHeritage Leaks User Data of 92 Million Customers→