Friday, June 8th, 2007

Chronicle of a Breach Foretold

About a month ago I posted about breaches at educational institutions, and suggested that rectifying the problem could start by simply not hoarding PII (personally identifiable information) unnecessarily.
Today I read about this breach at Northwestern University (not the first data breach for them) where social security numbers of 4,000 individuals may have been compromised, including [...]

1 Comment » - Posted in breach, privacy, universities by Slavik

Monday, May 7th, 2007

Breach at University of Western Florida: Are academic institutions sitting ducks?

While it’s not headline news yet (and may never achieve such lofty status), a recent database breach at UWF was exposed and later reported in local news. What exactly happened and how many records were compromised is, as usual in such cases, unknown.
This made me think: We hear of breaches at universities all too frequently. [...]

4 Comments » - Posted in breach, insider threat, privacy, security, universities by Slavik

Tuesday, May 1st, 2007

So what really happened at TJX?

What better way to start a blog about database security than to discuss what is possibly the biggest data breach ever?
It now seems that several banks are suing TJX over claimed losses of tens of millions of dollars - so negligence in data protection carries a cash penalty, not just nebulous damage to reputation. Gross [...]

No Comments » - Posted in TJX, breach, credit cards, encryption, insider threat, monitoring by Slavik