Archive for March, 2009

Online Security Company Hacked

Friday, March 27th, 2009

Data Loss Source: A hacker accessed databases used by the usa.kaspersky.com website, allowing him to possibly gain access to users accounts, activation codes and possibly personal data about Kaspersky Lab’s customers. The company admitted that a database containing customer information had been exposed for almost 11 days and that it only learned of the breach when the hackers told the company about it.
Date of Breach: Feb. 16, 2009
Size of Loss : 2,500
Affected Individuals: Kaiser employees
Geographic Focus: Woburn, MA
Data contained: The customer database included e-mail addresses and software activation codes.
Additional Notes: The breach was likely caused by a combination of vulnerable code crafted by an unnamed third-party vendor and poor code review by Kaspersky, said experts.
Additional Information: ComputerWorld

Parkland Memorial Hospital Employees at Risk of ID Theft

Friday, March 6th, 2009

Data Loss Source: A laptop containing employee and retiree information was stolen from Parkland Memorial Hospital.
Date of Breach: Feb. 3, 2009
Size of Loss : 9,300
Affected Individuals: Kaiser employees
Geographic Focus: Dallas, TX
Data contained: The laptop likely contained names, birth dates and Social Security numbers.
Additional Notes: The laptop, valued at $1,862, contained no information related to Parkland patients, said the hospital. Employees were advised to monitor their credit profiles or place fraud alerts on their accounts, and invited to enroll in a free, one-year online credit monitoring service.
Additional Information: Dallas News

Government Travel Site Hacked

Friday, March 6th, 2009

Data Loss Source: Govtrip.com, a travel reservations Web site used by federal agencies was hacked, and sent unsuspecting users to a malicious domain, according to ComputerWorld. GovTrip is used by several U.S. government agencies, including the EPA, the Department of Energy, Department of Health and Human Services , Department of the Interior, Department of Transportation and the Treasury Department to make travel reservations, as well as to reimburse workers for travel expenses.
Date of Breach: Feb. 11, 2009
Size of Loss : Unknown
Affected Individuals: Users of the site.
Geographic Focus: U.S.
Data contained: Unknown
Additional Notes: Hackers breached the site, then modified it to redirect users to a rogue URL that in turn directed attack code against their systems.
Additional Information: PC World