Legal news, articles & updates| SC Media

Legal

Woman accused of hacking Capital One indicted for alleged cyber intrusions, cryptojacking

A federal grand jury in Seattle yesterday indicted alleged Capital One data thief Paige Thompson in relation to a series of breaches and cryptojacking attacks that victimized more than 30 different companies. The indictment alleges that Thompson, 33, created a software program that identifies web application firewall misconfigurations while scanning the publicly-facing portion of servers…

Authorities free 850,000 machines from grasp of Retadup worm

Law enforcement authorities rescued roughly 850,000 machines that were infected with Retadup malware by replacing the command-and-control infrastructure with a disinfection server, causing the worm to self-destruct. The operation took place last July under the auspices of the French National Gendarmerie’s Cybercrime Fighting Center and the FBI, and was significantly aided by researchers at Avast,…

Caught in a bad romance: Feds indict 80 alleged members of romance/BEC scam ring

Federal prosecutors today unsealed a 252-count indictment against 80 individuals – mostly Nigerian nationals – who allegedly conspired to bilk at least $46 million from victims via romance scams, business email compromises and other online fraud schemes. The grand jury indictment was filed in the Central District of California back in October 2018 and unsealed…

U.S. indicts three over alleged phishing campaign targeting universities, businesses

The Department of Justice has indicted two Americans and a Nigerian on multiple charges for their alleged roles in a phishing scheme that targeted college employees, banks and other businesses from May 2013 through June 2014. Filed on Tuesday in U.S. District Court in New Mexico, the indictment identifies the defendants as Nigerian citizen Otuokere…

Capital One breach exposes not just data, but dangers of cloud misconfigurations

The massive Capital One data breach that compromised the personal information of 100 million credit card customers and applicants serves as a stark reminder that misconfigurations and malicious insiders can defeat the most well-intentioned cyber defenses, even when companies rely on a third-party cloud service to securely manage their data. In the case of Capital…

FTC levies historic fine on Facebook for privacy violations

The U.S. Federal Trade Commission today announced that it has penalized Facebook $5 billion as punishment for what it described as deceptive privacy practices, and imposed new restrictions on the social media giant. Facebook likewise announced that it has agreed to the terms of the deal. In conjunction, the Department of Justice officially filed a…

Icloud

Georgia man sentenced to prison for hacking iClouds of athletes and musicians

A Georgia man who used various phishing and social engineering attacks to break into the iCloud accounts of professional athletes and musicians was sentenced to three years in prison. Kwamaine Jerell Ford, 27, hacked into more than 100 Apple accounts belonging to high-profile individuals and spent nearly $325,000 using stolen financial information from several of…

Premera Blue Cross to cough up $10 million to 30 states over data breach

Premera Blue Cross has consented to pay $10 million as compensation for a nearly year-long data breach that impacted more than 10.4 million health patients, the Washington state’s Attorney General Bob Ferguson announced yesterday. More than half of those funds, roughly $5.4 million, will be allocated to Washington, and will be applied toward the enforcement…

Jury awards Minneapolis officer punitive damages for illegal searches of her DMV records

A federal jury last week awarded a Minneapolis policewoman $585,000 after determining that fellow city employees, including other law enforcement officers, repeatedly accessed her DMV records without any legal justification. Officer Amy Krekelberg originally filed suit in a Minnesota federal district court in 2013, alleging multiple violations of the Driver’s Privacy Protection Act from 2009…

Next post in Legal