Tuesday, November 30, 2010

WikiLeaks’ Founder Now Targeting Corporate America

According to a revealing Forbes interview with Wikileaks.org founder, Julian Assange, states early next year, a major American bank will “find itself turned inside out.”  Assange has always followed through on his threats and he now says tens of thousands of internal documents from a major U.S. bank will be published on WikiLeaks.org.  These documents will uncover corruption and unethical practices which will stimulate investigations and reforms.  Many unpublished and damaging documents on financial institutions, pharmaceutical companies, and energy companies are currently in his hands.

Individuals can access  incriminating documents on a laptop, USB stick, or portable hard drive and send them out through personal E-mail accounts, blogs, or simply submit them directly to WikiLeaks.

Do you have any processes in place to prevent this?

Start your conversations with Attevo now to mitigate your organization’s risk and exposure because your industry could be next. Call (216)928-2800 to set up a meeting today!

Tuesday, November 23, 2010

Disney Stock Prices Plummet as Quarterly Earnings are Released Early

On November 11, 2010, approximately 30 minutes before The Walt Disney Co. was slated to release quarterly earnings results, trading volume spiked and shares dropped 4.9 percent. Disney was forced to release earnings 16 minutes earlier than normal.

Disney's Senior Vice President of Investor Relations released the following statement, "We are aware that information regarding our fourth-quarter earnings became available ahead of its formal release and we are investigating how this occurred. We do regret any confusion caused by this incident."

This incident comes two months after a Disney employee pleaded guilty to conspiracy to commit securities fraud for trying to sell access to the company's quarterly earnings ahead of their release.

To assess the risks and compliance regulations your company faces, search a database of industry breaches, and calculate the cost of a data breach, please visit Attevo's DLP Toolkit at http://dlp.attevo.com

Security Software Vendor, Omniquad, Exposes Customer Details on the Web

On October 4, 2010, it was brought to the attention of the managing director of Omniquad that a helpdesk call system had posted sensitive information about their customers to the internet.  Omniquad, an anti-spyware company, was quick to place blame on the third-party vendor of the exploited software. A spokesperson from Privacy International expressed the feelings of disappointment that many share, "Security and privacy should be at the core of everything they [Omniquad] do and that includes carrying out security audits of all third-party software and services they offer."

This breach brings to light the fact that relying on the security measures of partners or third-party vendors is not enough. Carefully assessing risks to your organization does not stop at the front door. 




Hospital Fined $250,000 For Late Reporting of Data Breach


Lucile Salter Packard Children's Hospital at Stanford University has been fined $250,000 by California health officials for failing to report within five days a breach of 532 patient medical records in connection with the apparent theft of a hospital computer by an employee. 
Under state law, that amount is the maximum penalty allowed for failing to report such an incident, according to spokesman for the California Department of Public Health, Ralph Montano. The penalty is assessed at the rate of $100 for every day of delayed reporting after the first five days for each patient medical record that was breached, he said. 
Source: http://www.healthleadersmedia.com/page-1/TEC-256217/Hospital-Fined-250000-For-Not-Reporting-Data-Breach

New York-Presbyterian Hospital & Columbia University Medical Center — 6,800 Records

Sometime in July, 2010 paitent information, including names, clinical data, and in a few cases social security numbers, was made available to the public via the internet. The exposure was discovered by a paitent’s family member on July 29, 2010.
The cause of the breach has been determined to have been caused by paitent data being inadvertently placed on a server that was accessible from outside.
Read more about this story here: http://www.phiprivacy.net/?tag=newyork-presbyterian