Comments
Newest First | Oldest First | Threaded View
Re: Largest breach?
any idea why that wouldn't be on the HHS listing?
Largest breach?
As I recall, the largest breach occured to the VA Tricare system potentially affecting over 4.9 million records (no one is quite sure about the top-end count). That was in 2011.
Re: same sad responce
My colleague Mathew Schwartz suggests the fact that they can't tell what was taken, if anything, may indicate a lack of investment in incident management and response technology to trace the breach. He has a column coming today that will discuss some of these issues in a broader context.
It may be that the other shoe will drop in the coming weeks, as customers and patients of the hospital discover specific problems traced to this incident.
It may be that the other shoe will drop in the coming weeks, as customers and patients of the hospital discover specific problems traced to this incident.
Re: same sad responce
"No proof" does not mean there is no such kind of problem. It just indicates that nobody has a proper estimation about the scope of damage!
It also means that no one (i.e. the company/hospital/retailer) wants to be held liable for paying for the damage.
It also means that no one (i.e. the company/hospital/retailer) wants to be held liable for paying for the damage.
Re: same sad responce
Somehow I got use to read such kind of news/headlines. The confidential information breach is such a bad thing. The statement from official agency is always irresponsible: "We have no proof that such kind of breach has resulted in any concrete problem". This is really a void statement - "no proof" does not mean there is no such kind of problem. It just indicates that nobody has a proper estimation about the scope of damage!
same sad responce
Most of these breaches have the same sad response. Something like "We have no proof any of this info has been used misused". Are they going to monitor this for years? This stolen data could be used now or 2 years from now. I am so tired of hearing that type of response.
Most of these breaches have the same sad response. Something like "We have no proof any of this info has been used misused". Are they going to monitor this for years? This stolen data could be used now or 2 years from now. I am so tired of hearing that type of response.
Re: Same Shoddy Security, Different Day
I'm not at all surprised that the healthcare is the target of a data security breach! It's only been in the past decade the industry has widely adopted electronic health records and other digital technologies. Credit bureau and consumer data tracking service company Experian reported last month:
The sheer size of the industry makes it vulnerable when you consider that as Americans, we will spend more than $9,210 per capita on healthcare in 2013. Add to that the Healthcare Insurance Exchanges (HIEs), which are slated to add seven million people into the healthcare system, and it becomes clear that the industry, from local physicians to large hospital networks, provide an expanded attack surface for breaches."
More at: http://www.informationweek.com/healthcare/policy-and-regulation/healthcare-data-breaches-to-surge-in-2014/d/d-id/1113259?
Same Shoddy Security, Different Day
I shake my head every time a breach occurs because such activity underscores just how sloppy/negligent most entities are when it comes to protecting consumer data -- No/Misapplied patches, use of Microsoft products, zero to very little training of personnel having access to confidential data... Where does it end? And while credit/ID theft monitoring is nice, it is far too little and far too late. The concept of security should occur **before** a breach, not following it. How many times does it have to happen before there is a mass uprising?
The Privacy Rights Clearinghouse (PRC) in San Diego has a much more comprehensive (and honest) data breach listing found here >> http://www.privacyrights.org/data-breach
The Privacy Rights Clearinghouse (PRC) in San Diego has a much more comprehensive (and honest) data breach listing found here >> http://www.privacyrights.org/data-breach
Standard bureaucratic language?
Is that just standard bureaucratic language to say our system was breached and the hackers had full access to all this data ... but we're just not sure they actually took any of it.
Is there some example of where hackers gained that kind of access and didn't take advantage of it? Like the Grinch seeing the light and putting all the presents back neatly in their place?
Is there some example of where hackers gained that kind of access and didn't take advantage of it? Like the Grinch seeing the light and putting all the presents back neatly in their place?
White Papers
Current Issue
InformationWeek Tech Digest, Dec. 9, 2014Apps will make or break the tablet as a work device, but don't shortchange critical factors related to hardware, security, peripherals, and integration.
Video
Slideshows
Twitter Feed
Archived InformationWeek Radio
InformationWeek Live for the Week of February 22, 2015
UPCOMING!
Wednesday, March 11, 12pm EDT
Upgrading from Windows Server 2003: Why Now is the Time to Make Your Move
Wednesday, March 11, 12pm EDT
Upgrading from Windows Server 2003: Why Now is the Time to Make Your Move
Everything You've Been Told About Mobility Is Wrong 
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
- Featured UBM Tech Sites
- InformationWeek |
- Network Computing |
- Dr. Dobbs |
- Dark Reading
- Our Markets:
- Business Technology |
- Electronics |
- Game & App Development
- Working With Us:
- Advertising Contacts |
- Event Calendar |
- Tech Marketing Solutions |
- Corporate Site |
- Contact Us / Feedback
Tweet This
User Rank: Author
2/7/2014 | 10:15:04 AM