follow-up: Attorney Adds Security Company, State IT Department to Data Breach Lawsuit

[security curmudgeon <jericho () attrition org>]

http://threatpost.com/en_us/blogs/attorney-adds-security-company-state-it-department-data-breach-lawsuit-110512

November 5, 2012, 9:57PM
Attorney Adds Security Company, State IT Department to Data Breach Lawsuit
by Anne Saita

A former South Carolina lawmaker has added the data security firm 
Trustwave and the state's technology department to a lawsuit filed in the 
wake of a massive data breach at the state's Department of Revenue.

The Associated Press reports attorney John Hawkins in an amendment claims 
Trustwave "violated and failed to comply with the duties imposed upon them 
to encrypt data and to expeditiously disclose the breach of security."

The state hired the managed security service provider in 2005 to secure 
its databases. Trustwave, an international company based in Chicago, 
specializes in compliance tools offered through MSSP or cloud-based 
services. It did not release a statement in response to its inclusion in 
the lawsuit.

[..]

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.