All Entries Tagged With: "lawsuit"

Hannaford Breach Liability Case

In a SANS post recently it said “A federal judge will soon decide if Hannaford Bros. can be held liable for damages stemming from a data security breach late 2007 and early 2008. The attackers stole details of more than 4 million credit and debit cards. Attorneys for Hannaford have asked that the [...]

Financial Data Breach Study by Kevin Prince of Perimeter eSecurity

A new financial institution data breach study has recently been published by Kevin Prince of Perimeter eSecurity. It analyzes breaches between 2000 and 2008. While several aspects of the study deserve individual discussion and attention, it is interesting that Kevin Prince did a podcast interview with BankInfoSecurity. In the podcast Kevin answers [...]

How strong is the PCI shield?

Heartland CEO Bob Carr announced that they will fight any lawsuit because they were PCI certified at the time of the breach. Others including Hannaford plan to use the PCI shield as a way to protect their pocketbooks from lawsuits.

If being PCI certification meant that 1) your network was free from hackers, [...]

Data Breach = Class-Action Lawsuit

In our sue happy society, it doesn’t seem to matter how or why a breach occured. It doesn’t matter if the data was touched, manipulated, or used for any purpose (including fraud). It doesn’t matter if the data was found intact and unobserved. If you have a data security breach of just [...]

2nd 20MM Class Action Lawsuit against RBS WorldPay

A firm in Philadelphia has filed a second class action lawsuite against RBS WorldPay in the amount of 20 million. This is after criminals stole 9 million in a highly coordinated ATM fraud scheme. See previous post here for more information.
It is becoming so that data breach is synonymous with [...]

Veterans Administration to pay 20 million for data breach

-The VA willing to settle for 20 million in class-action lawsuit
-Robery in May 2006 of portable media and laptop containing personal information
-Media and laptop recovered with no sign that the data had been accessed or used
-26.5 million individuals are listed as part of the class-action lawsuit
http://www.cnn.com/2009/POLITICS/01/27/va.data.theft/
http://www.msnbc.msn.com/id/28880494/