Analysis and Commentary, Incidents

TD Ameritrade Breach

No Comments 15 September 2007

A database breach at TD Ameritrade Holdings, Inc. exposed approximately 6.3 million account holders to an increase in spam. Account holder information, including e-mail addresses and phone numbers were stolen in the breach but more sensitive information, such as Social Security numbers, appears to have not been compromised. So far, there have been no reports of confirmed identity theft. Similar to the timeline of the TJX debacle, it appears that the breach could have occurred as far back as October and was only recently fixed.

Analysis and Commentary, Incidents

The True Cost of Compliance

No Comments 12 September 2007

Back in June, an intern with the State of Ohio was entrusted with a backup designated for “offsite storage”. The backup was stolen from the intern’s car, along with a radar detector, on June 10th. Now, let’s not quibble over the fact that sensitive information was entrusted to an intern. Nor should we dwell on the seemingly braindead decision of using said intern’s home as the “offsite storage location” for the backup. Instead, we should focus on the fact that the loss of approximately 1.3 million records is expected to cost teh state of Ohio $3 million! Of that sum, $2.3 million is for enrollment in credit protection services offered by Debix, Inc . This service runs $99 per year for the average person to sign-up for. At the rate we are going, I would suggest not paying the $99 and just waiting for your personal data to get lost and having the costs absobed by the offending entity.

Analysis and Commentary, Incidents

Pfizer’s Hat Trick

No Comments 07 September 2007

Pfizer goes for round three. Up to 34,000 employee records may now be vulnerable to ID theft. This is on top of the 17,000 records lost earlier this summer. More details can be found here .

Continue Reading

Analysis and Commentary, Incidents

Bank of India Breach

No Comments 04 September 2007

Looks like the Bank of India was hit and caused users to be redirected to a malicious site which then attempted to load up to 22 different exploits on the unsuspecting victim. Is that a new record? Maybe it should be a statistic we track.

Details can be found here .

© 2007 Brightfly, Inc.

Powered by You, the Community.