Equifax, others must secure apps as part of New York settlement

The New York attorney general’s office said five apps made by well-known companies could have leaked user data. The firms – Western Union, Priceline, Equifax, Spark Networks and Credit Sesame – have agreed to revamp the security of their apps as part of a settlement announced Friday. The state office said the companies failed to use the proper protocols to secure user information that is transmitted over the internet, despite assuring users about the security of the apps in question. “Businesses that make security promises to their users – especially as it relates to personal information – have a duty to keep those promises,” said Barbara Underwood, the New York attorney general, in a statement. The AG’s office said that the apps at had a “well-known security vulnerability” that could enable man-in-the-middle attacks, whereby a hacker can intercept data when it’s sent via a wireless connection. The office explained that apps that fail […]

The post Equifax, others must secure apps as part of New York settlement appeared first on CyberScoop.

Continue reading Equifax, others must secure apps as part of New York settlement

Uber to pay $148 million to states for 2016 data breach

Ridehailing company Uber will pay $148 million across all 50 states and Washington, D.C., as part of a settlement stemming from a data breach that revealed sensitive information on 57 million of the company’s users. The breach took place in October 2016 and revealed names, email addresses, phone numbers and U.S. driver’s license numbers. The company paid the hackers $100,000 to stay quiet and delete the data. Several attorneys general released statements after the settlement was announced, with each state getting a varying amount. “Uber completely disregarded Illinois’ breach notification law when it waited more than a year to alert people to a serious data breach,” said Illinois Attorney General Lisa Madigan. “While Uber is now taking the appropriate steps to protect the data of its drivers in Illinois and across the country, the company’s initial response was unacceptable. Companies cannot hide when they break the law.” “Uber violated Pennsylvania law by failing to […]

The post Uber to pay $148 million to states for 2016 data breach appeared first on Cyberscoop.

Continue reading Uber to pay $148 million to states for 2016 data breach

3D Printed Gun Saga: Court Case Over CAD Files Settled

Can you create 3D printed designs and distribute them freely and without restriction? Maybe, and it’s likely to become easier in the future. A settlement has been reached in the saga of the US Department of State versus Cody Wilson, and beginning August 1st the Defense Distributed library of gun designs will once again become available.

Cody is well known for creating the first 3D printed gun. He went on to found Defense Distributed, a company that published designs and technical files for 3D printing firearms before being pulled into litigation that sought to curb the distribution of such plans …read more

Continue reading 3D Printed Gun Saga: Court Case Over CAD Files Settled

Facebook settles after 14-year-old sues over nude image reposting

The alleged extortionist, still facing charges, reposted the image to shame sites multiple times. Why didn’t Facebook use hashes to stop it? Continue reading Facebook settles after 14-year-old sues over nude image reposting

Target pays out $18.5M to victims of infamous 2013 data breach

Target Corp. reached an $18.5 million settlement Tuesday concerning an infamous 2013 data breach that affected upwards of 100 million customers, New York Attorney General Eric Schneiderman announced Tuesday. The deal involved 47 states and is described as the largest multi-state breach agreement in U.S. history. The settlement requires that Target maintain cybersecurity safeguards that were installed after the breach was first disclosed and implement appropriate encryption policies where possible. Over the last several years, Target executives have worked with state authorities to address hundreds of claims related to the 2013 Christmas data breach — which caused the franchise’s then CEO Gregg Steinhafel to resign. A statement by a company spokesperson provided to the Associated Press reads: “we’re pleased to bring this issue to a resolution for everyone involved.” @Target Our settlement requires @Target to implement a comprehensive program to protect consumers’ private data & help protect against future hacks. — Eric Schneiderman […]

The post Target pays out $18.5M to victims of infamous 2013 data breach appeared first on Cyberscoop.

Continue reading Target pays out $18.5M to victims of infamous 2013 data breach