Intelligent CISO Issue 02 | Page 24

threat updates
GLOBAL
SearchInform reports that Cambridge Analytica obtained personal data of 50 million users of Facebook . The data was allegedly needed for academic research , but the information was going to be used in order to impact American voters during the election campaign .
From now on third-party programs will be allowed to access only names , photos and email address while a user agreement will be signed to procure publications and other profile data .
NORTH AMERICA
The Oregon Clinic informed its patients that on March 9 this year , it discovered that an unauthorised third party had accessed an email account . In a statement for customers , posted on its website , the clinic said it immediately disabled the unauthorised access to the account and began an investigation to determine what had happened and whether protected health information ( PHI ) had been affected .
The statement added : “ We also engaged cybersecurity experts , including a digital forensics firm , to determine the nature and extent of the incident . On April 19 2018 , the investigation determined that PHI may have been affected . We determined that the incident was restricted to the one email account and did not affect any other aspect of the Oregon Clinic network .” Affected patients are being offered credit and / or identity monitoring services for 12 months at no cost through Experian .
24 Issue 02 | www . intelligentciso . com