Re: [Dataloss] Hacker may have accessed DHH database

[Jeffrey Walton <noloader () gmail com>]

Hmmm... It seems some wires got crossed somewhere.

> “What we don’t know is whether the hacker was able to access any
> information,” Faust said.

And

> “Although we have no indication that information was actually released, we
> know that it was accessed,” Tony Keck, ...

On Thu, Nov 4, 2010 at 5:46 PM, Christine Fulgham
<christine () opensecurityfoundation org> wrote:
> http://www.2theadvocate.com/news/105946193.html
>
> Some 56,000 emergency medical technicians were advised this week that a
> hacker may have gained access to personal information about them contained
> in a state licensing database.
>
> The state Department of Health and Hospitals sent letters to the emergency
> medical technicians, notifying them of the incident that occurred Sept. 17.
>
> [...]
>
> Department of Health and Hospitals spokeswoman Lisa Faust said Bureau of
> Emergency Medical Services personnel discovered the database breach. The
> unauthorized entry gave the hacker access to an individual’s name and
> personal information, including Social Security numbers.
>
> “What we don’t know is whether the hacker was able to access any
> information,” Faust said.
>
> A computer screen displayed the message “You have been hacked,” Faust said.
> “Since we don’t know one way or the other we sent notices out to 56,000
> people that there’s a potential that the information was compromised.”
>
> “Although we have no indication that information was actually released, we
> know that it was accessed,” Tony Keck, DHH’s deputy secretary, said
> Wednesday.
>
> Both the East Baton Rouge Parish Sheriff’s Office and the Louisiana Attorney
> General’s Office are investigating, Keck said.
> _______________________________________________
> Dataloss Mailing List (dataloss () datalossdb org)
> Archived at http://seclists.org/dataloss/
> Unsubscribe at http://datalossdb.org/mailing_list
>
> Learn encryption strategies that manage risk and shore up compliance.
> Download Article 1 of CREDANT Technologies' The Essentials Series:
> Endpoint Data Encryption That Actually Works
> http://credant.com/campaigns/realtime2/gap-LP1/
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/