Last week, a Minnesota court ruled that a consolidated class action filed against SuperValu retail chain failed to assert any harm, finding that while SuperValu did suffer two data breaches, the class’s claims of possible future injuries were too speculative, and the class therefore lacked standing to sue. The data breaches occurred in 2014 at
Data Breach
University of Washington Medical School pays OCR $750,000 for data breach
The Office for Civil Rights (OCR) announced on Monday, December 14, 2014, that it has settled a HIPAA investigation with the University of Washington Medical School involving a data breach in October of 2013.
The breach occurred when an employee in the billing office clicked on an email attachment that contained malware and exposed 90,000…
Privacy Tip #12 – Credit card safety during the holidays (use cash!)
‘Tis the season of shopping. Cyber-Monday has just passed and news flashes indicate that the total amount consumers purchased online on Monday will exceed $3 billion. Wow. All with credit cards.
We all use our credit cards more during the holidays than any other time of year. As a result, it is a prime time…
Dow Jones & Co. notifies 3,500 of data breach
Dow Jones & Co. has notified 3500 of its customers that their information was accessed by an unauthorized individual in a data breach that spanned from August 2012 through July 2015.
The unauthorized access, through malware, exposed the names, addresses, email addresses, telephone numbers, and credit card information of 3,500 subscribers, including subscribers to The…
Target and Visa reach $67M settlement
Visa, Inc. announced on August 18th that it has reached a settlement with Target for $67 million to reimburse Visa for costs associated with the Target data breach in late 2013, including issuing millions of new cards to affected consumers.
Target was unable to reach a similar proposed settlement with MasterCard (view related posts Proposed…
Second class action suit filed against Medical Informatics
We previously reported that Medical Informatics Engineering, Inc. was sued over a data breach that occurred in May and affected over 4 million individuals. Thereafter, Indiana AG Gregory Zoeller advised all Hoosiers to freeze their credit to protect themselves.
Late last week, a second proposed class action suit was filed against Medical Informatics in California…
United Airlines suffers network breach—same hackers as OPM suspected—dark motives
United Airlines has confirmed that it has suffered a data and network breach that occurred during the same time frame as the OPM breach. Investigators suspect the same Chinese state-sponsored hackers are responsible for both breaches. One theory being advanced about the connection between the two breaches is that the Chinese state-sponsored hackers are targeting…
Fred’s Inc. discloses data breach to SEC
In its most recent filing with the Securities and Exchange Commission (SEC), Fred’s Inc. disclosed this week that a security firm found malware in its system that was designed to lift customer credit card information. Although it appears from reports that the hackers may have had access to customer credit card information, the security firm…
OPM update: OPM hit with another class action suit—this one filed by a Judge
Ho hum. Another class action filed against OPM for its massive data breach. The interesting fact here? The suit’s named plaintiff is a Judge with the Social Security Administration. On Friday, August 7, Social Security Administration Judge Teresa J. McGarry hit the OPM with its latest proposed class action suit alleging that OPM was aware…
Proposed class action case filed against Medical Informatics Engineering
Medical Informatics Engineering, Inc., an electronic medical record service provider, recently disclosed a data breach affecting approximately 4 million individuals. Within days of the disclosure, Medical Informatics was hit with a proposed class action lawsuit alleging that it should be held to a higher standard as its business is based on data security and it…