Breach

Privacy may be an admirable goal, but it's not clear that people really want it.

Protecting patient privacy during health-related research should be controlled separately from HIPAA regulations, according to a new Institute of Medicine report.

A security services provider for the federal government is notifying employees, former employees and customers that its network was compromised by malware.

Database security provider Sentrigo on Wednesday announced a new free database scanner called FuzzOr. The utility runs on Oracle Database versions 8i and above to identify security-related coding errors. It enables database administrators to test applications written in PL/SQL code and identify and repair vulnerabilities that may be exploited via SQL injection and buffer overflow attacks, Sentrigo said. -- AM

The cost of a data breach rose to a new record in 2008, according to the fourth annual Ponemon Institute study.

The $818 billion economic stimulus bill that the U.S. House passed this week includes security and privacy controls regulating the digitization of patient health records.

One week after Heartland Payment Systems disclosed that its systems had been breached, a class-action lawsuit against the payment processor was filed in a New Jersey federal court.

The U.S. Department of Veterans Affairs has settled a class-action lawsuit resulting from a massive data breach that left 26.5 million active duty troops and veterans open to the risk of identity theft.