Archive for January, 2012
Council fined £140,000 for five serious data breaches
Posted by brianfpennington in brian pennington on 30/01/2012
The five serious data breaches – all involving children’s social service reports being sent to the wrong recipients – happened at Midlothian Council and occurred between January and June 2011. One breach concerned papers concerned with the status of a foster carer being sent to 7 healthcare professionals who had no need to see them Another case […]
Aftermath of a Data Breach
Posted by brianfpennington in brian pennington on 29/01/2012
Ponemon Institute, sponsored by Experian®, has released the findings of their Aftermath of a Data Breach study. The study was conducted to learn what organizations did to recover from the financial and reputational damage of a data breach involving customer and consumer records. Consumer and customer information collected by organizations is at great risk due to […]
RSA’s January 2012 Online Fraud Report
Posted by brianfpennington in brian pennington on 27/01/2012
Below is a summary of RSA’s Jnauary 2012 Online Fraud Report:- PHISHING IS A NUMBERS GAME In 2011, approximately one in every 300 emails circulating the web was deemed to contain elements pointing to phishing. Most phishing content targeted the public sector, which was followed by the SME business sector. Compared with the total numbers of phishing […]
RSA’s December Online Fraud Report
Posted by brianfpennington in brian pennington on 27/01/2012
Below is a summary of RSA’s December Online Fraud Report: November saw DNS Poisoning, aka Pharming, making the headlines on more than one occasion: To name a few, the online threat showcased in the high-profile hijacking of several Brazilian ISPs’ DNS servers; an incident that resulted in millions of Brazilian users being infected with a […]
European Privacy Day 2012 – 28th January
Posted by brianfpennington in Uncategorized on 27/01/2012
The 28th January will be the European Privacy day for 2012. The campaign states that “2011 was a year with privacy discussions about Facebook, use of hacking by journalists, use of intelligent CCTV by police forces, use of twitter during urban riots, face recognition, smart houses and smart viewing of houses, and ICT for active […]
Cybersource’s 2012 UK Online Fraud Report
Posted by brianfpennington in brian pennington on 26/01/2012
Cybersource have produced their eighth UK Online Fraud Report– 2012, a summary of the report is below. The respondents to this year’s report came from a balanced group of merchant, classified as: Medium business (annual online revenue of £500,000-£5m) Large business (£5m-£25m) Very large business (more than £25m) Small business respondents (less than £500,000) accounted […]
Data Protection & Breach Readiness Guide
Posted by brianfpennington in brian pennington on 25/01/2012
The Online Trust Alliance (OTA) has release it’s 2012 Data Protection & Breach Readiness Guide, a comprehensive guide outlining key questions and recommendations to help businesses in breach prevention and incident management. This post is a summary of their results and guidance. Craig Spiezle, Executive Director and President of the Online Trust Alliance said “Last year, […]
Lose memory stick: go straight to court, do not pass go and do collect damage to reputation…
Posted by brianfpennington in brian pennington on 20/01/2012
Praxis Care Limited breached the UK Data Protection Act and the Isle of Man Data Protection Acts by failing to secure Personally Identifiable Information (PII). An unencrypted memory stick was lost on the Isle of Man in August 2011 and contained personal information relating to 107 Isle of Man residents 53 Northern Ireland residents Some of the […]
Fraud could be costing UK hotels over £2 billion a year
Posted by brianfpennington in PCI DSS Compliance on 19/01/2012
PKF (UK) LLP and the Centre for Counter Fraud Studies at University of Portsmouth (CCFS) have produced a document titled, “the resilience to fraud of the UK hotel sector”. The document was based upon a series of questions to hotels with the results shown both statistically and graphically. The survey was supported by HOSPA, the Hospitality Professionals […]
Health worker convicted of obtaining patient details unlawfully
Posted by brianfpennington in brian pennington on 17/01/2012
Juliah Kechil, formerly known as Merritt, a former Health Care Assistant in the outpatients department at the Royal Liverpool University Hospital has pleaded guilty to unlawfully obtaining patient information by accessing the medical records of five members of her ex-husband’s family in order to obtain their new telephone numbers. She was convicted under section 55 of the Data […]