Collaborate Disseminate
Taylor Regional Hospital in Kentucky recently notified 190,209 patients of breach that they identified in January. An investigation determined that an unauthorized person had gained access to their network between November 2, 2021 and January 19, 2022,… Continue reading 55,000 there, 190,000 there, 1.8 million there, and the breaches roll on…
Kathleen Magramo reports: Hong Kong’s electoral office has apologised after an employee failed to follow guidelines and sent the personal details of about 15,000 voters to a random email address. The Registration and Electoral Office (REO) on Friday sa… Continue reading Hong Kong electoral office apologizes after employee accidentally sends details of 15,000 voters to random email
I’m trying to establish a TLS client-server connection with openssl 1.0.1x on ubuntu-14.04 in order to create a fix for CVE-2015-0205 for learning purposes.
I found this explanation of CVE-2015-0205:
An OpenSSL server will accept a DH cer… Continue reading trying to test the vulnerability CVE 2015-0205 for university project
After multiple unsuccessful attempts to get a popular Japanese medical online consultation site to secure a misconfigured bucket, researchers at SafetyDetectives have decided to publicly disclose the leak. Doctors Me provides customers with on-demand a… Continue reading Japanese medical online consultation site leaking consumer-submitted images of symptoms
Zack Whittaker reports: Internal documents, officer health records, and personnel files belonging to India’s Central Industrial Security Force were spilling online because of a data security lapse. A security researcher in India, who asked not to be na… Continue reading A security lapse exposed India’s CISF personnel files and health records
There is an interesting lawsuit stemming from an incident that had previously been claimed to be a rogue insider’s doing. Now Marc Stolowitz, the former employee, is suing the firm, Nuance Communications, claiming that the firm falsely accused hi… Continue reading Shooting the Whistleblower? Defamation Suit Claims Nuance Communications Gave False Info to FBI, SEC, Retaliated Against Whistleblower
Scott Carroll reports: Arkansas Attorney General Leslie Rutledge on Thursday announced a lawsuit against the defunct Eastern Ozarks Regional Health for failing to protect sensitive patient information after it closed. The former hospital in Cherokee Vi… Continue reading Arkansas AG Sues Defunct Health Provider for Mishandling Patient Records
Alaina Lancaster reports: More than 60,000 additional confidential attorney discipline records were exposed in a data breach of the State Bar of California’s case management system, according to an ongoing investigation. The bar’s IT incident response … Continue reading State Bar Breach Exposed Thousands More Confidential Records Than Original Estimates, Investigation Shows
Jan Vermeulen reports: South African Nespresso distributor Top Coffee has sent a notice to clients informing them that their names, phone numbers, and email addresses may have been leaked. According to the notice, the personal information may have been… Continue reading Nespresso data leak in South Africa
A. Kevin Corvo reports: Hilliard City Schools leaders are reviewing protocols related to public-information requests after learning Feb. 27 the district released the identity of students who were subject to disciplinary measures. “This was a mistake (a… Continue reading OH: Hilliard City Schools evaluating protocols after releasing 4,200 names of students in public-information request