The U.S. Department of Health and Human Services has imposed a $1.5 million penalty on American eyewear manufacturer and retailer Warby Parker due to its failure to properly secure its systems from a credential stuffing attack in 2018 that compromised almost 200,000 individuals' protected health information, reports The Record, a news site by cybersecurity firm Recorded Future.
Widely known Chinese cybersecurity company TopSec has been impacted by a data leak revealing more than 7,000 records shedding light on its likely role in the Chinese government's internet censorship efforts, Hackread reports.
The group, led by Rep. John Joyce, R-Pa, aims to create a national privacy standard to protect consumer rights and maintain US leadership in digital technology, including artificial intelligence.
These applications, designed to streamline tasks and enhance productivity, often operate without security controls, exposing organizations to risks such as data breaches, compliance violations, and reputational harm.
Aside from including individuals' names, birthdates, email addresses, phone numbers, vaccination statuses, and medication details, other surveys in the misconfigured database also had information on adverse COVID-19 vaccine reactions, pregnancy status, birth control usage, and physician's names.
Additional details regarding the nature of the incident — which also resulted in the takedown of the firm's MyGenea app for cycle tracking and fertility data viewing — and the types of information that may have been compromised have not been provided.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
