Campaign TREND. Data Breach. Voter information Hacked.

What campaign related voter information was hacked?   Voter files compiled by  L2, a political data brokerage, but hacked from a client (campaign) that left the voter information unprotected on a cloud

What type of voter information was exposed?   names, addresses, political preferences and opinions on social issues

Where were the hackers? Serbia or routed through Serbia

The Hill | US voter database accessed from Serbian server

Business Trend. Regulatory Guide for Data Safety. 29 Point Data Security Inspection for Business.

The Federal Trade Commission publishes “Start with Security: A Guide for Business” & offers these recommendations for business:

  • Don’t collect personal information you don’t need.

  • Hold on to information only as long as you have a legitimate business need.

  • Don’t use personal information when it’s not necessary.

  • Restrict access to sensitive data.

  • Limit administrative access.

  • Insist on complex and unique passwords.

  • Store passwords securely.

  • Guard…

Data Breach TREND. The Low Tech Data Breach in Your Printer.

Are all data breaches electronic? No, hard copies of personal information are still sources of data breaches.

Are there examples of major data breaches that were based on hard paper copies? Yes. For example:

  • The NFL medical record data breach of 2016
  • A 2014 State of California investigation of Safeway for improperly disposing of customer records
  • A 2011 find of NYPD records found in a trash bin

Do data breach laws discuss paper records?  No, not all. The Federal laws and these 8…

A Northern State. Stronger Data breach Laws.

Why Illinois updated its data security laws? To make the laws more consistent with technology

What additional personal information is covered by data breach law?

  • health insurance
  • medical information
  • biometric information
  • username and password or security questions

How will businesses be able to notify consumers of a breach? By email

Cook County Record | New IL legislation updates data breach law to cover more tech, speed required consumer notifications

INTERIM. Regulatory Enforcement TREND. Data Breach. Financial Entity. Regulatory Fine. Be Informed.

Which financial entity is facing an SEC fine for a data breach? Morgan Stanley

How much is the SEC fine? $1,000,000

What was the data breach? Security measures failed to prevent an employee from transfering account information to a private server that was hacked

What do federal rules require of financial entities? policies and procedures that are reasonably designed to protect customer data

The Hill | Morgan Stanley to pay $1M SEC fine for data breach

Law Enforcement TREND. Local Government TREND. Protect Data Security by Approving every Surveillance Technology Purchase. Where the Left and the Right Meet.

What government is requiring authorization from the governing body before a purchase of surveillance equipment can be made? Santa Clara County deep on Silicon Valley

Which police purchases will require approval?  Any law enforcement purchase of new surveillance technologies. e.g.:

  • license plate scanners
  • products that spoof cellphone towers
  • closed-circuit cameras

What entities can approve the police technology?  County board and district attorney approval are required

Why require…

Data Security. Self Driving Cars. Marketing & Hacking Abounds.

Data Security is the 1 key element missing from the 7 states that have passed self driving car laws.

Cars can be hacked. Cars contain data. The data your car’s computers contain can be used for:

  • direct & targeted marketing
  • cam be accessed by hackers

California is addressing vehicle data via regulation by requiring:

  • notice and consent
  • before information can be collected from operators
  • this excludes information that is needed to operate the vehicle

The Guardian | Self-driving cars:…

INTERIM. 3 Reasons Old Data is Still Valuable to Hackers.

  • passwords are valuable because we don’t change them and use them on multiple account
  • its data mining material to engineer more information about your identity
  • a hacker can use 4 year old LinkedIn data for their own illegal purposes, and 4 years later sell it openly on the black market. 

IT Pro Portal | Why four-year-old data is more valuable than you think