A screenshot of the letter sent to New Hampshire's Attorney General
(WEB HOST INDUSTRY REVIEW) — The breach of private information belonging to more than 100,000 Massachusetts residents could test the state’s new data privacy law, according to a report by Threat Post. New York City bus tour company CitySights NY was hit with a SQL injection attack on its servers, which contained the financial information of 1,850 Massachusetts residents was stolen.
Though the breach occurred in September, it was not detected until October by a Twin America Web programmer.
It was later revealed when a copy of a letter written by parent company Twin America’s attorney Theodore P. Augustinos of Edwards Angell Palmer & Dodge to the Attorney General of New Hampshire, disclosing the breach, was published online.
The security breach case could test out Massachusetts’ new data privacy law, 201 CMR 17, is considered one of the most stringent in the country.
In place since March 1, the law addresses the misuse of private data by both individuals and companies and third party providers that store, collect or use personal information belonging to Massachusetts residents, regardless of whether those organizations are based in or have offices in the state.
All organizations that store the private information of Massachusetts’ residents are required by the law to encrypt this data in databases, servers, laptops, desktops, and mobile devices, as well as all ivate data transmitted over wired or wireless networks.
Attorney General Coakley’s Office said it does not confirm or deny investigations and it unclear as to whether CitySights was in violation of 201 CMR 17.
Though it appears that Twin America took into consideration the possibility of the case being brought under 201 CMR 17 or comporable state laws.
The letter Augustinos sent to New Hampshire Attorney General Michael specifies that the compromised information did not include “Social Security numbers, drivers’ license or other state-issued identification or other personal information.”
No related posts.
