Data Security

A Romanian researcher has discovered a major password breach on the FTP site belonging to the IEEE. He blames a misconfigured server, as well as the sloppy practice of storing passwords on log files.

Thousands of individuals may have had their personal information exposed after hackers used a successful phishing attack to springboard to an email server belonging the Kentucky Department for Community Based Services.

A recent federal appeals court ruling may make it easier for people to prove they suffered identity theft as a result of a data breach.

Attackers could link password hash with specific session key to crack users' passwords.

There may be no silver bullet to detect or prevent insider threats, but there are sophisticated technological solutions that can help.

The wagering site, TwinSpires.com, of the racetrack that is home of the Kentucky Derby, was hacked last month, exposing the names of account holders, as well as other encrypted information kept on computer records.

Police are investigating a data breach incident at the University of Miami Hospital, where two employees were fired for stealing patient data, and possibly selling the sensitive information.