June 30, 2003

Sen. Feinstein: "Notification of Risk to Personal Data Act""

Senator Feinstein Seeks to Ensure Individuals are Notified when Personal Information is Stolen from Databases . This federal bill introduced June 26 is modeled upon California SB 1386, but would put enforcement powers with the FTC and state attorneys general rather than with private litigants. Like 1386, the proposed federal law exempts data that was "encrypted" but seems not to define the level or manner of encryption. More info at the Senator's press release linked to above.

Thanks to beSpacific.com for the heads up on this item. I'll be looking for the full text of the bill. If a reader has a link, please let me know via a comment or email.

Posted by dougsimpson at 08:48 PM | Comments (1) | TrackBack

June 19, 2003

Stanford Law: Conf on Cyber Security, Privacy and Disclosure

Conference on Cyber Security, Privacy, and Disclosure at Stanford, California, scheduled for November 2003: "This conference explores the relationship between computer security, privacy and disclosure of information about security vulnerabilities." No exact date or tuition stated.

Posted by dougsimpson at 07:42 PM | Comments (0) | TrackBack

Sunny So Cal Notes SB 1386 Comment

The Southern California Law Blog picked up our note on S.B. 1386, with a referral.

The weblog focuses on "legal and political issues facing attorneys practicing in and around Southern California," which should keep the host busy. Thanks for the referral, SoCal Law Blog.


Posted by dougsimpson at 06:31 AM | Comments (1) | TrackBack

June 11, 2003

BubBear.B virus targets 1200 banks world-wide

FBI investigating "virus-like infection" trying to steal passwords at 1200 banks, including the world's largest, according to the Washington Post article titled "Virus Targeting Banks (washingtonpost.com)"

According to an AP feed found at The WorldLink.com the virus is not directly attacking the bank's computers, but is hitting consumer's computers, looking for bank web addresses that match those in its software. If it finds a match, it grabs consumer's passwords and emails it to ten email addresses, presumably the perpetrators', says the story.


Financial Services Information Sharing and Analysis Center
distributed information from the Office of Homeland Security to its client banks and is working with the FBI.

Network Associates Inc. BugBear.B info

Hmmmm ... will this need to be reported to California residents, per Calif. S.B. 1386?

Posted by dougsimpson at 10:31 AM | Comments (0) | TrackBack