Criminals spent 10 days in US dental insurer's systems extracting data of 9 million The criminals who hit one of the biggest government-backed dental care and insurance providers in the US earlier this year hung about for 10 days while they extracted info on nearly 9 million people, including kids from poverty-stricken homes. Managed Care of North America (MCNA) bills itself as "providing high quality …
Look at the attached payment information, payment_data_pdf.exe contains your payment details, please open the file and deposit the payments ...
These arrive all the time these days, this is how so many systems fall over - criminal activity is normal now, AI has created huge changes in the business world with users falling over all the time.
That's quite an amalgam. No doubt they're braced for a tongue-lashing over the fissures in their veneer of security and are whitening as we speak. They will need much wisdom to rebuild bridges, root out the decay in their systems and regain their crown.
Dear Master Grogan, I am sorry to inform you that your "pulling teeth" wisecrack was already used in the body of the article: Sometimes it can be like pulling teeth, right guys? , and that you are now being sued for copyright violation. Fortunately for you, there is help available, if you act quickly before your plug is pulled: https://www.donotcall.gov/register
Not just that, they pass the problem onto the people whose data has been slurped.
-> Those with children whose data was taken in the haul were offered advice in the breach notice on how they could "check to see if someone has created a credit file using my child's information."
Your data has been taken, here is how YOU can check what has happened to it.
I can see they trotted out the "think of the children" trope by writing about all of the data on poverty stricken kids. I don't see how Big Data will find any value in that. Maybe some graduate student will pay a few bob for some data to use on their dissertation.
I still think that company-ending fines should be on the punishment menu along with prison time for C-level execs if negligence can be demonstrated. It would suck that people would be put out of work, but there would be openings at other insurers that would be picking up loads of new customers.
"And criminal charges *can* be filed against the company officers as well."
But they aren't so the downside to being cavalier about PII and data security continues. Why should companies hire good IT security people and keep their hardware/firmware/software security patches up to date if it's less expensive to not spend that money (more left for bonuses and executive retreats in the Bahamas). If an executive making 8 figures a year had a risk of going to prison or losing their position and being banned from an industry for a decade to life, security would be a regular item on their agenda.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
