Government


Defense Department Sued Over Data Breach

A group of people affected by the TRICARE data breach in September has filed a class-action lawsuit against the Department of Defense, alleging that the department and its health care organization didn’t properly safeguard personal information that was stored on backup tapes stolen last month.


The Securities and Exchange Commission has issued new guidance to help public companies determine when they may need to disclose an attack–or even a potential attack–in order to make potential investors aware of possible risks to the company’s business. The guidance, which does not constitute a rule or requirement for companies to disclose, is meant to help “registrants in assessing what, if any, disclosures should be provided about cybersecurity matters.”

Samy Kamkar has always been prescient. He first gained notoriety by showing how nascent social networks like MySpace could be used to spread malware rapidly among a population of millions (now billions) of users. His worm for MySpace, dubbed the ‘Samy Worm’ earned him a visit from law enforcement. But Kamkar kept up his research. More recently, he has turned his attention and considerable skills to the problem of persistent user tracking. His Evercookie, released in October, 2010, called attention to the myriad of ways that advertisers, media firms and online merchants were finding to track their customers – often despite explicit efforts by customers to prevent their online activities to be tracked. More recently, his research into suspicious geotagging was the foundation for a class action lawsuit against Microsoft.