Complementary identity protection services (IDPS) have long been a staple of post-breach damage control as compromised organizations repair their reputation with customers. Done well, these services can offer real protections to breach victims. Done...

This past week has witnessed the release (i.e., black market sale) of two massive password files from social media website breaches, and there is an outstanding question posed by the timing and use of this data. Why now? Consider: The files...

Billions of transactions were facilitated by payment data that would at some point be transmitted across systems under the control of organizations with strict cybersecurity policies and strong controls – where it was practically untouchable – it...

It would not be unfair to compare some of today’s black hats to the illusionists of yesteryear, as the Target and Neiman Marcus data breaches were tricks of almost Houdiniesque proportions – they occurred right before our eyes, while being almost...

In March 2012, Global Payments was forced to acknowledge that a breach had occurred, but the devil is in the details. Transparency is the last word that anyone would use to describe this massive breach, and for good reason. While MasterCard and Visa...

The healthcare industry stores massive amounts of PII, and it is incumbent upon them to protect that data from theft. This has never been truer given Federal regulation (think HIPPA and HITECH) and the current fraud environment. We know that...