Data Privacy News

Karen Evans to be next DHS CIO

Evans will replace John Zangardi, who left in late last year to take a position with Leidos.

NSA warns Russian hackers exploited email flaw

Russian hackers have compromised a longstanding vulnerability in a widely used email delivery software program at least since August of last year, according to an advisory from the National Security Agency.

Lawmakers look to retool NSF for tech

Competition with China is at the center of a bipartisan $110 billion plan to boost technology research and development by a dramatic reorganization of the National Science Foundation.

Privacy report outlines scope, limitations of ICE facial recognition

According to a recently released privacy assessment, Immigration and Customs Enforcement systems are linked to a network of image databases across the country, and future trainings are being eyed to combat abuse and misuse.

Team coverage: COVID-19 and the federal government

Live Webinar | 5 Critical Security and Privacy Lessons From CCPA Litigation

Accounting of Disclosures Under the HITECH Act

A notice of proposed rulemaking from the HHS Office for Civil Rights that would modify the HIPAA Privacy Rule standard for accounting of disclosures of protected health information and add new requirements for access reports.

Annual Report to Congress on Breaches of Unsecured Protected Health Information

The Department of Health and Human Services' Office for Civil Rights provided a report to Congress on health information breaches from September 2009 through 2010, as required under the HITECH Act. Nearly 7.9 million Americans were affected by almost 30,800[…]

Ransomware Gangs' Ruthlessness Leads to Bigger Profits

Both the Volume of Successful Attacks and Victims' Payoffs Have Been RisingRansomware-wielding criminals are growing increasingly ruthless, based on the size of their extortion demands, their increasing propensity to leak data in an attempt to force victims to pay and[…]

LiveJournal Blog Platform Credential Leak: What Happened?

Millions of Older Credentials Apparently Used in Credential-Stuffing AttacksThe Russian blogging platform LiveJournal confirmed this week that it suffered several brute-force attacks in 2011 and 2012. But it insists that the 26 million usernames and passwords that are now available[…]