US border control reveals a cyber attack stole traveller data
Tuesday, June 11, 2019
No airline passenger data was compromised, and the stolen data did not include passport information or other travel documents.
CEO of ImmuniWeb Ilia Kolochenko said the strangest aspect of the CBP's data breach revelation is its timing.
"Just after the unwarranted transfer of confidential data to the subcontractor’s network, they suddenly got hacked as if someone has been purposefully waiting for this," he said.
"Of course, we may suppose that the subcontractor had been breached and backdoored for a while already, but this puts in question the vetting process at CBP when selecting suppliers to handle sensitive data."
The incident could also pose legal ramifications under the European Union’s (EU) General Data Protection Regulation (GDPR) should any of the compromised data also belong to EU citizens. Read Full Article
ITWeb: ImmuniWeb debuts free GDPR compliance test
Forbes: A Year Later, Many Sites Are Still Failing To Meet Basic GDPR Requirements