Monday, May 27, 2019

Google Giving More Flexibility To Private Data Removal

Tech giant Google recently unveiled the next step in its plan to put more power in the hands of users when it comes to their own data.  The most recent change involves the introduction of a new auto-delete feature tied to your Google account.

It will allow you to set your Location History, Web data and App Activity data to auto-delete after a set period of time defined by you.

With the way things currently work, users have two options.  They can either disable Location History and Web and App activity entirely. Or they can manually delete portions of their data (or all of it).  Neither option is great, since many apps won't function with those services disabled, and the second is exceedingly cumbersome.

Worse, an AP investigation last year revealed that even if you take the step of disabling your Location History, Google can, will, and does continue to track your location.  In fact, just last month it came to light that Google maintains a gigantic database called 'Sensorvault' that contains the detailed location histories of hundreds of millions of phones around the world. In addition, the company reportedly makes the database available to law enforcement agencies to assist them in solving crimes.

This caught the attention of and drew the ire of privacy advocates around the world. This most recent change comes on the heels of that revelation and to the company's credit, it's a good move.

Under the new system, you have three options to choose from:
  • Keep until I delete manually
  • Keep for 18 months, then delete automatically
  • Keep for 3 months, then delete automatically
At this point, there's no official word from the company on when the new feature will be rolled out. You can be sure that when it is, it will make headlines everywhere.  It's a pity that it took this long to see, but it's a solid step in the right direction.

Call SpartanTec, Inc. to help your company setup an effective data protection program. 



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Friday, May 24, 2019

Stolen Personal And Medical Information Was Found Online


Jeremiah Fowler, a researcher with Security Discovery recently found an unprotected Elasticsearch databased owned by a company called SkyMed on the internet.  According to his findings the database was configured such that it was open and visible to any browser. This allows anyone who stumbles across it to edit, download, or even delete data without administrative credentials.
The database contained a total of 136,995 patient records with histories going back thirty years in some cases.

It also included a variety of personally identifiable information such as:
  • Patient full name
  • Email address
  • Date of birth
  • Address
  • Phone numbers
  • In some cases, detailed medical information
Mr. Fowler promptly contacted SkyMed to inform them of the discovery. To their credit, the company promptly took the database offline.  They did not, however, make a formal reply to Mr. Fowler. They have not, to this point, reached out to any of the patients whose names and personal information appeared in the database.

Is your company database exposed?

In addition to the unprotected database, Mr. Fowler discovered forensic evidence that indicated the company's network may have been infected with an unknown ransomware strain.  Again, however, the company has maintained total silence and has not contacted anyone, including their customers or impacted patients with details.

This complete lack of response is highly unusual.  On the heels of such an incident, we normally see a formal acknowledgement, an apology, a statement to the effect that the company is working with law enforcement and possibly engaging the services of a third party to assist with the investigation.

In addition to that, companies almost always make some effort to reach out to impacted parties to warn them of the dangers, advise of next steps they can take and offer free credit protection.

None of that has happened thus far, which could prove to be disastrous for SkyMed.  In the absence of those steps, it's difficult to see how the company's customers can trust them going forward.  In any case, be advised that if you are in any way reliant on SkyMed for any part of your care, there's a chance your personally identifiable data was exposed.

How do you make sure your companies data is secure? Contact SpartanTec, Inc. for a FREE dark web analysis of your company.


SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto


Tuesday, May 7, 2019

AeroGrow May Have Had Data Breach 


Do you do any indoor gardening?  If so, odds are that you own AeroGrow equipment. If that's the case, some of your personal information, including the credit or debit card number you paid for the goods with, may have been compromised.

The company recently notified its customers that they discovered malware lurking on their payment processing page.

For reasons that aren't yet clear, the company did not detect the malicious code for some four months. They estimate that the malware was active between October 29, 2018 and March 4, 2019.
Aerogrow has notified the FBI and enlisted the aid of a third party to assist with the forensic investigation, which is ongoing.  At present, the company is unable to determine how many of its customer records were compromised.

To this point, they have confirmed that among impacted customers, the following information was taken:
  • Credit or Debit card number
  • Expiration date
  • Security Code
  • Any personal data the customer may have used to verify processing of the payment in question
Grey Gibbs, the AeroGrow Senior VP of Finance and Accounting issued a formal apology in the aftermath of the incident, saying, "I want to sincerely apologize for this incident and I regret any inconvenience it may have caused you.  I want to assure you that we take this criminal act very seriously and have addressed it thoroughly."

The company's response has been generally good, and they've offered a year of free credit monitoring to all impacted customers. However, that's small consolation to those who now have to deal with the prospect that their identities may have been stolen and may face fraudulent charges on their credit cards in the weeks and months ahead.

If you're an AeroGrow customer, to be safe, report your payment card as compromised and take whatever other steps you deem necessary to protect your identity.


Are you concerned about the data stored on your servers. SpartanTec, Inc. can provide peace of mind with a free dark web scan.



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Wednesday, May 1, 2019

Facebook Admits To Accessing Email Contacts


Facebook can't seem to stay out of its own way.  Recently, the social media giant has made headlines on a regular basis, and seldom for anything good or groundbreaking.  Not long ago, the company found itself in the midst of a controversy when it came to light that they were asking people for their email account passwords, claiming that it needed these in order to verify the identities of the new users. For businesses involved in social media sites like Facebook, it is best to get in touch with an IT consultant before proceeding to prevent such compromising incidents.

As a practice, this is almost unheard of.  In fact, countless numbers of articles have been written underscoring the fact that no legitimate company would ever request such information.  In addition, if anyone ever received an email asking for email logins and passwords, (or passwords of any kind), it was a sure sign of a scam in progress. In the case of a leak, it would be severely damaging to users. Always seek advice from an IT consultant Fayetteville regarding these matters.

In addition to that being a horrible business practice, the fear was that Facebook was improperly using the information and unauthorized to harvest personal information on everyone who complied with their unreasonable request.

As it turns out, those fears were spot on.  The company recently released a statement saying that they "unintentionally" uploaded email contacts from some 1.5 million new users on its servers, without the consent or knowledge of those users.

Part of the company's dubious explanation reads as follows:

"Last month we stopped offering email password verification as an option for people verifying their account when signing up for Facebook for the first time.  We estimate that up to 1.5 million people's email contacts may have been uploaded.  These contacts were not shared with anyone and we're deleting them.  We've fixed the underlying issue and are notifying people whose contacts were imported.  People can also review and manage the contacts they share with Facebook in their settings."

Given the company's recent history of privacy abuses and information security gaffe, this explanation has not been well received. It provides further evidence that Facebook has and continues to utterly fail when it comes to protecting its users' information, even as it generates billions of dollars in revenue from it.

Does your company need a complete technology solution provider? Call SpartanTec, Inc. today.



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Friday, April 26, 2019

Breach At Georgia Tech University Exposes Personal Info


If you've ever been a student or employee of the Georgia Institute of Technology, be advised that any personally identifiable information the university had on you may have been compromised. To be fully confident that personal or company data is protected, get hold of your IT consultant immediately.

Recently, the university reported an instance of unauthorized access into databases connected to its web app.

They first discovered evidence of the unauthorized access in mid-December of 2018 and have been investigating since.  To date, however, it remains unclear exactly how long a time the unidentified hackers had access to their databases or what specific information may have been taken. Data breaches should not be taken lightly. Precaution must always be taken. For businesses, it is a crucial to be in touch with an IT consultant Fayetteville.

The formal statement issued by the university says, in part:

"The information illegally accessed by an unknown outside entity was located on a central database.  Georgia Tech's cyber security team is conducting a thorough forensic investigation to determine precisely what information was extracted from the system, which may include names, addresses, social security numbers and birth dates."

The fact that the university's investigation is now several months old indicates that the hackers were quite skilled. Given the information that the University fears was compromised, it's more than enough to create a false identity.

If you have ever been employed at Georgia Tech, or if you've ever taken classes there, be mindful that enough of your personal information may have been compromised to steal your identity. Regardless, everyone must take measures to improve information security, keeping safe from such compromises. If you haven't yet used a service that helps protect you against such things, it may be time to consider doing so.  In any case, vigilance is the order of the day.

We don't yet know how many records may have been compromised, but it's better to be safe than sorry.  If you've been fortunate enough to have avoided having your identity compromised, count yourself lucky indeed.  It's something that can take years to fully recover from.  Stay on your guard.

Call SpartanTec, Inc. if you need more information on how to keep your computer and personal or business information secure from online threats.



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Thursday, April 11, 2019

Identity Theft A Common Occurrence For Most Americans


By this time, you have probably heard about identity theft. However, have you ever wondered just how much of a problem identity theft is? The answer is quite alarming. According to a survey done by nCipher, 29% of the respondents said that they had been victims of identity theft. The results are quite depressing primarily because a lot of people think that it is a norm among Americans to encounter identity theft. With this in mind, private individuals or businesses must have an IT consultant to stay away from malicious attacks over the internet.

Although looking at it, 17.6% might seem a small number but when you convert it actual affected people, the numbers start to add up. That’s still 58,080,000 Americans that say identity theft is common, citing instances of attacks. Comparing it to the data gathered in 2017, the results show a huge increase in the number of cases. Just two years ago, the reported cases of identity theft was only as 16.7 million instances. It is still a huge number but a far cry from the data in 2018.

Another more depressing factor is that not all victims of identity theft report their cases. There are those that just simply don’t do anything about it, thinking that it wouldn’t damage their credibility too much. Some instances might be more harmful than others but the fact remains that identity theft is a very real thing. That’s why for companies, an IT consultant Fayetteville plays an important role in keeping the data of its workforce safe.

Hackers have gone quite a long way to steal other people’s private information. It’s a growing problem that isn’t about to go away overnight. Millions of people will still be affected without proper computer security and it’s no surprise why a lot of Americans find identity theft a common occurrence.

Don’t let hackers steal your information. Call SpartanTec,  Inc. today.



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Friday, April 5, 2019

Average Ransomware Attacks Cost Victims $6,700 Per Instance


If you’ve ever heard about ransomeware, you would be aware by now that these attacks seek payment to make locked down computers usable again. How much do these attacks cost victims? The answer is a whopping $6,700 on average and that’s not the overall cost but the price per instance. For example, if your business has 100 computers that are all infected, you’d have to pay a really huge sum just to get them working again. Always work with your IT consultant regarding matters on how to protect your computer network from these kinds of attacks.

According to data gathered by Coveware, payments demanded for each infected computer rose 13% from last quarter amounting to an average of $6,733. Part of the reason why this is happening is because of the fact that hackers are growing more articulate with their targets. In recent months, hackers have been attacking companies that are relatively easy to break into and are in no position to refuse payment. It’s also a reason why companies must always keep in touch with their IT consultant Fayetteville for such matters.

Concern From IT Management Companies


One major concern, he said, is the fact that a lot of companies still don’t have the right systems installed to boost information security within the company. Many businesses still aren’t up to date on the latest security threats and trends or are refusing to adapt. When it comes down to it, if companies are hit with a ransomware attack, they’d spend more money paying ransom than having proper security in place. Obviously, companies have a clear choice. The only thing they need to do is take it and immediately.

Is your business in need of protection against hackers? Call SpartanTec, Inc. today to tap into their complete technology solutions.



SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto