Remove 2005 Remove Information Security Remove Privacy Remove Risk
article thumbnail

Canadian Flair Airlines left user data leaking for months

Security Affairs

This increases the risk of passengers’ personal information, such as emails, names, or addresses, ending up in the wrong hands. Flyflair.com belongs to the Canadian ultra-low-cost carrier Flair Airlines, founded in 2005. The leak consisted of publicly accessible environment files hosted on the flyflair.com website.

Phishing 122
article thumbnail

New York Enacts Stricter Data Cybersecurity Laws

Data Matters

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

HHS Settles Potential HIPAA Violations with Concentra Health Services and QCA Health Plan Inc.

Hunton Privacy

On April 23, 2014, the Department of Health and Human Services (“HHS”) announced settlements with two health care companies stemming from allegations of inadequate information security practices in the wake of investigations involving stolen laptop computers. Concentra Health Services (“Concentra”) and QCA Health Plan Inc. (“QCA”)

article thumbnail

NERC $10,000,000 Fine of Public Utility Highlights the Need for Cybersecurity Preparedness and CIP Compliance Programs

Data Matters

Although none of the violations resulted in any reported outages, NERC concluded that the cumulative effect of the violations posed a serious risk to the reliability of the bulk U.S. A clear theme throughout the settlement is the necessity to create a top-down, enterprise-wide culture of compliance and cyber risk management.

article thumbnail

OCR Settles Two HIPAA Cases with Public Health Centers in Oregon and Mississippi

Hunton Privacy

These vulnerabilities included (1) storing electronic protected health information (“ePHI”) on a cloud-based server without entering into a business associate agreement (“BAA”) with the cloud provider; (2) conducting inadequate risk analyses; and (3) failing to implement a mechanism to encrypt and decrypt ePHI.

article thumbnail

Alleged Violations of a Privacy Policy

Hunton Privacy

A recent federal court decision offers a detailed analysis of several theories of liability for violations of a privacy policy. During her visit, she provided Jackson Hewitt with confidential information such as her Social Security number, date of birth and driver’s license number. Jackson Hewitt Tax Service Inc.,

Privacy 40
article thumbnail

G Suite users’ passwords stored in plain-text for more than 14 years

Security Affairs

“We made an error when implementing this functionality back in 2005: The admin console stored a copy of the unhashed password. To be clear, these passwords remained in our secure encrypted infrastructure.” This practice did not live up to our standards. ” continues Google.