Tag Archive for: sensitive

5 ways to protect sensitive employee health information – Employee Benefit Adviser (registration)


Employee Benefit Adviser (registration)

5 ways to protect sensitive employee health information
Employee Benefit Adviser (registration)
It's imperative that employers and their advisers understand the legal obligations if a company experiences a data breach that involves the protected health information of employees. Federal law says that under certain circumstances companies have to

and more »

data breach – Google News

Users leak sensitive data via Microsoft document-sharing site

Users leak sensitive data via Microsoft document-sharing site

If you feel you must use a cloud-based service to store your confidential data, then please be careful to think before you click.

Read more in my article on the Hot for Security blog.

Graham Cluley

Scottrade breach exposes sensitive data for 4.6 million customers

On the heels of hacks hitting artist funding site Patreon and a database of 15 million people who applied for T-Mobile accounts comes word that online stock brokerage Scottrade has suffered a breach that exposed the personal information of 4.6 million customers.

Scottrade officials said in an online advisory that the breach happened in late 2013 or early 2014 and exposed social security numbers, e-mail addresses and “other sensitive information,” whatever that may be. While all that data was available for the taking, the advisory said the attackers appeared to target client names and street addresses. The notice never made it clear if password data was also accessed, but unhelpfully, the officials said, “Client passwords remained fully encrypted at all times and we have not seen any indication of fraudulent activity as a result of this incident.”

Remarkably, the officials leave it up to customers to decide whether they should change passwords. Out of an abundance of caution, Ars recommends that all Scottrade users change their passcodes ASAP, both on the brokerage site and any other sites that may have used the same credentials. The officials said they learned of the breach after receiving information from federal law enforcement investigators. Scottrade is offering a year of free identity protection services to all 4.6 million people whose details were included in the compromised database.

Read on Ars Technica | Comments

Ars Technica » Technology Lab