The process of notifying affected populations in the event of a data breach is complex and littered with potential land mines – handled poorly, the notification can be a black eye for an organization and potentially open them up to regulatory fines or sanctions. Brian Lapidus and his team at Kroll have assembled the following advice for businesses to help them minimize their risk and simplify what has become a very challenging process.
There is no shortage of news stories dealing with cybercrime and data breaches. From Citigroup admitting that computer hackers breached the bank’s network and accessed the data of about 200,000 bank card holders in North America, to the huge data breach at Sony and its Playstation Network, it’s all over the news.
While most companies see cyber security as a major concern, they nevertheless underestimate how much a security breach can cost, according to a new survey from Aveksa Inc.
Following close on the heels of the major Sony hack that exposed millions of accounts to criminals, LastPass notified its subscribers of a major hack on their service, exposing about one and a quarter accounts to these cyber criminals.
Sony yesterday reported a second security breach by hackers, who may have stolen personal information about 24.6 million users, according to news services.
A New York Yankees ticket rep apparently sent out an email blast that included a spreadsheet containing the names, addresses, phone numbers, and email addresses of 20,000 season ticket accounts, according to a report in DeadSpin.com, a sports website.
Sony Corp could face legal action across the globe after it delayed disclosing a security breach of its popular PlayStation Network, says a Reuters report.
The number of compromised data records in computer security breaches declined last year as thieves shifted their sights to smaller, non-financial businesses, according to a report by Verizon Communications Inc. (VZ).
The personal information of about 3.5 million Texans - including addresses and Social Security numbers - was mistakenly posted on public servers controlled by the state comptroller's office and remained there in some cases for more than a year.
