Identity Theft

IRS Issues Fraud Alert to Financial Institutions Complying with FATCA

By Joseph J. Lazzarotti on September 25, 2014

Posted in Data Security, Identity Theft, Information Management, Information Risk, International, Uncategorized, Written Information Security Program

The Internal Revenue Service issued a fraud alert for international financial institutions complying with the Foreign Account Tax Compliance Act (FATCA). According to the report, scam artists posing as the IRS – through attacks known as “phishing attacks” – have fraudulently solicited financial institutions seeking account holder identity and financial account information. Financial institutions …

New Hampshire Joins the Growing Number of States Limiting Employer Access to Employee Online Accounts

By Joseph J. Lazzarotti on August 13, 2014

Posted in Background Checks, Data Security, Identity Theft, Information Risk, Monitoring, Photos, Videos and Surveillance, Social Networking, Workplace Investigations

Effective September 30, 2014, New Hampshire joins sixteen other states (Arkansas, California, Colorado, Illinois, Louisiana, Maryland, Michigan, New Jersey, New Mexico, Nevada, Oklahoma, Oregon, Tennessee, Utah, Washington, and Wisconsin) in prohibiting employers from requiring employees or job applicants to disclose their login information for accessing any “personal account” or service through an electronic communication device. …

Report Says Russian Hackers Stole 1.2 Billion Usernames and Passwords, But Don’t Let “Breach Fatigue” Take Hold

By Joseph J. Lazzarotti on August 7, 2014

Posted in Data Security, Identity Theft, Information Management, Information Risk, Written Information Security Program

In what is believed to be the largest security breach to date, the Associated Press reported that Russian hackers have stolen 1.2 billion user names and passwords. According to the AP, Milwaukee security firm, Hold Security, learned of the breach, but has yet to provide details about the series of website hackings believed to have…

Strengthened Florida Data Breach Notification Law Signed by Governor Scott

By Joseph J. Lazzarotti on June 25, 2014

Posted in Data Security, Identity Theft, Information Management, Information Risk, Uncategorized, Workplace Privacy, Written Information Security Program

As we reported earlier, Florida lawmakers passed extensive revisions to its existing data breach notification law, SB 1524. On June 20, 2014, Florida’s Governor Rick Scott signed the bill into law, which becomes effective on July 1, 2014.

Our earlier post provides more of a discussion about key provisions of the law. But…

Florida Legislature Seeks to Overhaul Existing Data Security Law

By Jackson Lewis P.C. on April 29, 2014

Posted in Data Security, Identity Theft, Information Management, Information Risk

On the heels of recent nationwide data breaches of consumer personal information, the Florida State Senate has proposed SB 1524, which if adopted will become effective on July 1, 2014, to revamp and replace existing state data security law and, in particular, impose a statutory requirement to safeguard personal information, reporting a breach to…

Iowa Amends Its Breach Notification Law, Attorney General Notification Required For Breaches Affecting More Than 500 Iowans

By Joseph J. Lazzarotti on April 15, 2014

Posted in Data Security, Identity Theft, Information Risk, Written Information Security Program

Iowa made changes to its breach notification law (Iowa Code § 715C.1 et seq.) when the state’s Governor, Terry Branstad, signed S.F. 2259 into law. The amendment makes the following key changes which become effective July 1, 2014:

The existing law applies to “computerized” personal information. The amendment clarifies that this includes personal

…

Kentucky Enacts a Data Breach Notification Law and Protects Student Data in the Cloud

By Joseph J. Lazzarotti on April 12, 2014

Posted in Data Security, Identity Theft, Information Management, Information Risk, Uncategorized, Written Information Security Program

Kentucky Gov. Steve Beshear signed H.R. 232 on April 10, 2014, making the Commonwealth the 47th state to enact a data breach notification law. The law also limits how cloud service providers can use student data. A breach notification law in New Mexico may follow shortly.

Data Breach Notification Mandate

The Kentucky law follows the…

Recent IRS, MTA Data Breaches Provide Reminders To Not Ignore the “Low-Hanging Fruit”

By Joseph J. Lazzarotti on March 19, 2014

Posted in Data Security, Identity Theft, Information Risk, Uncategorized, Workplace Privacy, Written Information Security Program

Many organizations believe they have taken all steps necessary to eliminate the risk of a data breach. They often point to the organization’s deft IT team and tout the installation of some of the latest software solutions to protect sensitive data. However, some of these same organizations often fail to take some very basic steps…

FTC Announces Identity Theft Was Top Consumer Complaint During 2013, 14 Years Running

By Joseph J. Lazzarotti on March 2, 2014

Posted in Data Security, Identity Theft, Information Risk, Uncategorized, Written Information Security Program

According to an FTC press release, identity theft tops the national ranking of consumer complaints for 2013, with American consumers losing a reported $1.6 billion to fraud last year. Here is how some of the numbers break down:

Fourteen (14) percent of the more than two million complaints to the FTC (or 290,056) stemmed

…

Is it really deleted?

By Joseph J. Lazzarotti on February 26, 2014