Breach

Microsoft confirmed Monday that the credentials of thousands of Microsoft Windows Live ID accounts were posted online late last week.

A leaked document contained the names, Social Security numbers, home phone numbers and home addresses of 463 soldiers.

Attackers used information obtained from a breach to craft targeted messages aimed at persuading users to download an information-stealing trojan.

Hundreds of thousands of members of a pharmacy benefit management firm may have had their information exposed to extortionists.

Sixty percent of IT security professionals polled in a recent study said their organization does not have sufficient resources to become PCI compliant.

Privacy advocates are questioning a provision of the new health care breach notification rule, which states that organizations only need to alert victims if they believe disclosure of the information "poses some harm."

California Sen. Joe Simitian is close to seeing another of his privacy bills get signed into law -- this one requiring that data breach notification letters contain more details.

Industrial giant DuPont has been hit again by a malicious insider.