Controversial law firm ACS:Law has been fined £1,000 over the data
breach which saw personal details of 6,000 people exposed online
following a hack attack by rogue activist group Anonymous.
The Information Commissioner, Christopher Graham would have imposed a
fine more in the region of £200,000 had ACS:Law not recently ceased
trading.
He also criticised their security controls, saying "The security
measures ACS:Law had in place were barely fit for purpose in a person's
home environment, let alone a business handling such sensitive details."
The ICO has been criticised for not imposing a heftier fine but claim
their hands were tied by the fact the company was no longer in business.
It will be interesting to see in the future how the ICO will treat a
business who experience a similar incident and who don't or can't shut
down their operations ahead of a hearing.
Even decent sized law firms would struggle to pay a fine of £200,000 for
data protection security breaches. It is therefore imperative that
security controls are implemented and tested to protect your business
and any internal networks that may potentially be exposed to the Internet.
Security consultant Lee Hezzlewood of IT Security specialists Secure
Thinking said, "Businesses need to be aware of the risks. All companies
are connected to the Internet and therefore need to ensure they have
effective controls which are tested on a regular basis."
For more information on effective data security controls visit
http://www.securethinking.co.uk/
Wednesday, 25 May 2011
Wednesday, 4 May 2011
Secure Thinking: Osama bin Laden and Online Scams
So Osama bin Laden is dead eh? Killed by US troops in Pakistan apparently.
Do you want proof? Well we'd all like some proof. We'd like to see video footage of the assault, we'd like to see Mr bin Laden's body and all the DNA and facial recognition evidence.
Not because we're ghoulish, although some most definitely are, but because we're a sceptical bunch who don't always believe what we're told until we see it with our own eyes.
The problem with this in an online world is that there are many links being posted on websites and social media such as Facebook and MySpace which claim to show just such footage. There are emails doing the rounds which you are encouraged to pass on to your friends which also claim to show proof or evidence. But do they?
The answer is NO! NO they don't! But they are trying to infect your computer with spyware and viruses, or get you to pay for and install bogus anti-virus software by claiming you are already infected.
These scams are designed to fool users of social networks into installing software so that they expose themselves, their user IDs and passwords and their credit card and financial details to organised criminals!
This free advice from Secure Thinking costs you nothing, but be very careful what you click on - it might cost you more than you think!
Do you want proof? Well we'd all like some proof. We'd like to see video footage of the assault, we'd like to see Mr bin Laden's body and all the DNA and facial recognition evidence.
Not because we're ghoulish, although some most definitely are, but because we're a sceptical bunch who don't always believe what we're told until we see it with our own eyes.
The problem with this in an online world is that there are many links being posted on websites and social media such as Facebook and MySpace which claim to show just such footage. There are emails doing the rounds which you are encouraged to pass on to your friends which also claim to show proof or evidence. But do they?
The answer is NO! NO they don't! But they are trying to infect your computer with spyware and viruses, or get you to pay for and install bogus anti-virus software by claiming you are already infected.
These scams are designed to fool users of social networks into installing software so that they expose themselves, their user IDs and passwords and their credit card and financial details to organised criminals!
This free advice from Secure Thinking costs you nothing, but be very careful what you click on - it might cost you more than you think!
Tuesday, 3 May 2011
Secure Thinking: What Victims of the Sony Hack Need to Know
If you use Sony's PSN or SOE services there are a number of risks that
you're now exposed to.
Depending on the level of access gained by the hackers and the
information they were able to glean you could be exposed to some or all
of the following:
1. Credit Card Fraud
Issue: Some credit card details have been taken by the hackers. Sony
claim this information was encrypted and that the details from the SOE
attack date back to 2007.
Risk: Your current credit card details were included in those that were
stolen and the hackers have been able to decrypt and use them or sell
them on.
Precautions: Keep an eye on your credit card statements and notify your
card issuer of any suspicious or unauthorised transactions.
Alternatively, if you're very worried you could cancel your cards and
get new ones. It's also possibly worth keeping an eye on your financial
history and credit rating via someone like Experian to make sure you
haven't been the victim of further fraud.
2. Identity Theft
Issue: It appears that an awful lot of data was harvested in the
attacks. Alongside the credit card details which may have been
compromised, Sony have admitted that users names, addresses, dates of
birth and other potentially useful ID information has been compromised.
Risk: The criminals behind this kind of attack are after exactly this
type of information which they can use themselves or sell on to other
professional ID thieves. You could become the victim of partial or full
identity theft. This could put you at risk of significant financial
loss, reputational damage and could cost you a considerable amount of
money, merely to correct the damage.
Precautions: Fairly similar to credit card fraud – you need to keep an
eye on all your credit, bank and any other financial transactions. In
addition, it's a good idea to check your history on a regular basis and
possibly even take out ID theft insurance – but check with your provider
that you're covered retrospectively, otherwise you could be paying out
for nothing.
3. Online Compromise
Issue: The hackers have gained valuable information on millions of
users, including usernames and passwords. Many users use the same
account and password credentials across many different online and
offline services. This can range from using the same username with
multiple online services such as Hotmail and Gmail to using the same
password for Facebook and you online bank account.
Risk: If you reuse the same credentials across multiple platforms and
one of them is compromised then they all are – it is only a matter of
time before your other services are accessed. This can lead to a whole
host of problems, from someone posting questionable "status updates" on
Facebook or Twitter, to them attempting to access your online banking,
or even manipulating your friends into giving out their personal details.
Precautions: Change your passwords! Don't reuse the same passwords on
multiple platforms, particularly social and financial systems. And
don't always trust that your friend is the only person using their
social networking account – it may have been compromised.
4. Social Engineering
Issue: The sheer number of people who have had some or all of their Sony
account details compromised makes it very attractive to criminals
attempting different approaches. Some will use the simple ID theft and
credit card fraud approaches. Others will attempt to gain access to
other online resources. Yet another set may attempt to "socially
engineer" the individuals concerned – which essentially means to "con"
them into giving out other details by making them believe they are being
contacted by a legitimate company (including Sony themselves!).
Risk: You might take a call or receive a letter, email or social media
contact informing you that you're the victim of Sony's hack or some
other related issue. If this happens you will be asked to prove you are
the person concerned, and so you will be asked for other "security"
details. All of this information can be used to further compromise you
financially, steal your identity or access other online resources.
Precautions: Don't take off the cuff calls or other contacts at face
value. Be suspicious. Tell the caller that you will call them back,
get their name and office details and then call the main switchboard
number of the company they claim to be from. Do the same for emails and
letters. Remember, no legitimate organisation will ask you for your
full password or PIN number for an account.
Hopefully, nobody will ultimately fall victim to the criminals who
masterminded the attack on Sony. Unfortunately that's pretty unlikely.
All anybody can do now is to defend themselves to the best of their
ability and take precautions to limit the damage that can be inflicted
upon them.
This kind of attack, where major corporates are targeted, is likely to
occur more and more as service provider's offer ever increasing online
services to an ever growing online community.
What we need to do is attempt to defend ourselves and improve the
security of the services provided online, designing them with security
in mind from the start rather than implementing security as an afterthought.
you're now exposed to.
Depending on the level of access gained by the hackers and the
information they were able to glean you could be exposed to some or all
of the following:
1. Credit Card Fraud
Issue: Some credit card details have been taken by the hackers. Sony
claim this information was encrypted and that the details from the SOE
attack date back to 2007.
Risk: Your current credit card details were included in those that were
stolen and the hackers have been able to decrypt and use them or sell
them on.
Precautions: Keep an eye on your credit card statements and notify your
card issuer of any suspicious or unauthorised transactions.
Alternatively, if you're very worried you could cancel your cards and
get new ones. It's also possibly worth keeping an eye on your financial
history and credit rating via someone like Experian to make sure you
haven't been the victim of further fraud.
2. Identity Theft
Issue: It appears that an awful lot of data was harvested in the
attacks. Alongside the credit card details which may have been
compromised, Sony have admitted that users names, addresses, dates of
birth and other potentially useful ID information has been compromised.
Risk: The criminals behind this kind of attack are after exactly this
type of information which they can use themselves or sell on to other
professional ID thieves. You could become the victim of partial or full
identity theft. This could put you at risk of significant financial
loss, reputational damage and could cost you a considerable amount of
money, merely to correct the damage.
Precautions: Fairly similar to credit card fraud – you need to keep an
eye on all your credit, bank and any other financial transactions. In
addition, it's a good idea to check your history on a regular basis and
possibly even take out ID theft insurance – but check with your provider
that you're covered retrospectively, otherwise you could be paying out
for nothing.
3. Online Compromise
Issue: The hackers have gained valuable information on millions of
users, including usernames and passwords. Many users use the same
account and password credentials across many different online and
offline services. This can range from using the same username with
multiple online services such as Hotmail and Gmail to using the same
password for Facebook and you online bank account.
Risk: If you reuse the same credentials across multiple platforms and
one of them is compromised then they all are – it is only a matter of
time before your other services are accessed. This can lead to a whole
host of problems, from someone posting questionable "status updates" on
Facebook or Twitter, to them attempting to access your online banking,
or even manipulating your friends into giving out their personal details.
Precautions: Change your passwords! Don't reuse the same passwords on
multiple platforms, particularly social and financial systems. And
don't always trust that your friend is the only person using their
social networking account – it may have been compromised.
4. Social Engineering
Issue: The sheer number of people who have had some or all of their Sony
account details compromised makes it very attractive to criminals
attempting different approaches. Some will use the simple ID theft and
credit card fraud approaches. Others will attempt to gain access to
other online resources. Yet another set may attempt to "socially
engineer" the individuals concerned – which essentially means to "con"
them into giving out other details by making them believe they are being
contacted by a legitimate company (including Sony themselves!).
Risk: You might take a call or receive a letter, email or social media
contact informing you that you're the victim of Sony's hack or some
other related issue. If this happens you will be asked to prove you are
the person concerned, and so you will be asked for other "security"
details. All of this information can be used to further compromise you
financially, steal your identity or access other online resources.
Precautions: Don't take off the cuff calls or other contacts at face
value. Be suspicious. Tell the caller that you will call them back,
get their name and office details and then call the main switchboard
number of the company they claim to be from. Do the same for emails and
letters. Remember, no legitimate organisation will ask you for your
full password or PIN number for an account.
Hopefully, nobody will ultimately fall victim to the criminals who
masterminded the attack on Sony. Unfortunately that's pretty unlikely.
All anybody can do now is to defend themselves to the best of their
ability and take precautions to limit the damage that can be inflicted
upon them.
This kind of attack, where major corporates are targeted, is likely to
occur more and more as service provider's offer ever increasing online
services to an ever growing online community.
What we need to do is attempt to defend ourselves and improve the
security of the services provided online, designing them with security
in mind from the start rather than implementing security as an afterthought.
Wednesday, 20 April 2011
Secure Thinking: IT Security Specialists Join Burnley Bondholder Scheme
East Lancashire based Secure Thinking, a company specialising in IT and Information Security solutions today announced that it had joined the Burnley Bondholders Scheme to help promote the town as a place to do business.
The Bondholders scheme is an "innovative and powerful network of organisations who believe what is good for Burnley is good for business." The scheme was set-up to promote Burnley and change the view of the town as being a run-down, deprived area of stereotypical empty mills, cobbled streets, flat caps and whippets.
Secure Thinking's contribution is more than just financial. Lee Hezzlewood, the founder of the company is a Burnley lad, born and bred. His background makes him proud and defensive of Burnley and he is keen to see the town prosper.
"Burnley and East Lancashire region is a fantastic area with amazing countryside and warm, welcoming people. The problem is that the media typically depicts the place as run-down and deprived. Whilst some areas are deprived, just like in any other decent sized town, there are also some truly great business leaders, innovation and opportunities in the area. And I want to do what I can to promote them."
Secure Thinking was created to help other businesses protect themselves and their clients from loss of data, identity theft and online fraud, and Lee believes that it's hi-tec companies like his which will lead the regeneration of the region and turn it into a truly great place for business.
"Companies are becoming much more cost conscious and looking at better ways of operating. With modern communications and technology, companies don't need to operate from City based, fixed offices with huge overheads. Instead, they can look at reducing those overheads and allowing staff to work with more freedom and operate from locations offering better value for money. In my view, Burnley is just such a place."
The Bondholders scheme is an "innovative and powerful network of organisations who believe what is good for Burnley is good for business." The scheme was set-up to promote Burnley and change the view of the town as being a run-down, deprived area of stereotypical empty mills, cobbled streets, flat caps and whippets.
Secure Thinking's contribution is more than just financial. Lee Hezzlewood, the founder of the company is a Burnley lad, born and bred. His background makes him proud and defensive of Burnley and he is keen to see the town prosper.
"Burnley and East Lancashire region is a fantastic area with amazing countryside and warm, welcoming people. The problem is that the media typically depicts the place as run-down and deprived. Whilst some areas are deprived, just like in any other decent sized town, there are also some truly great business leaders, innovation and opportunities in the area. And I want to do what I can to promote them."
Secure Thinking was created to help other businesses protect themselves and their clients from loss of data, identity theft and online fraud, and Lee believes that it's hi-tec companies like his which will lead the regeneration of the region and turn it into a truly great place for business.
"Companies are becoming much more cost conscious and looking at better ways of operating. With modern communications and technology, companies don't need to operate from City based, fixed offices with huge overheads. Instead, they can look at reducing those overheads and allowing staff to work with more freedom and operate from locations offering better value for money. In my view, Burnley is just such a place."
Tuesday, 19 April 2011
Secure Thinking's New Anti-Spam & Email Filtering Solutions
IT Security Specialists Secure Thinking have teamed up with CronLab to help SME businesses safeguard themselves and their clients from the dangers posed by spam email.
"Spam is a growing problem and a major threat to businesses both in terms of security but also for productivity," commented Lee Hezzlewood, Secure Thinking's Managing Director.
"If your employees inboxes are full of unwanted and unsolicited emails then their work is going to be affected because they are having to take time sorting the emails and filtering the wheat from the chaff. On top of this you have the real threat of malicious intent, of emails which harbour viruses or link to infected websites and the dangers of phishing attacks, where emails are designed to fool the recipient into parting with sensitive information by making them believe they are responding to a legitimate request."
Secure Thinking's spam filtering solution is available as either a cloud based "hosted" service or via the use of dedicated appliances, which take minutes to install and set-up.
Either solution can be used for incoming and outgoing spam filtering, the latter ensuring your business doesn't become the source of spam resulting in your email being blacklisted should your own security be compromised.
There is also the option of stripping off email attachments and replacing them with a link, reducing the size of emails and inboxes for your company and your clients.
If you want to know more about Secure Thinking's Spam Filtering solutions contact us on 0845 071 4690 or email info@securethinking.co.uk and we'll be happy to discuss your requirements.
"Spam is a growing problem and a major threat to businesses both in terms of security but also for productivity," commented Lee Hezzlewood, Secure Thinking's Managing Director.
"If your employees inboxes are full of unwanted and unsolicited emails then their work is going to be affected because they are having to take time sorting the emails and filtering the wheat from the chaff. On top of this you have the real threat of malicious intent, of emails which harbour viruses or link to infected websites and the dangers of phishing attacks, where emails are designed to fool the recipient into parting with sensitive information by making them believe they are responding to a legitimate request."
Secure Thinking's spam filtering solution is available as either a cloud based "hosted" service or via the use of dedicated appliances, which take minutes to install and set-up.
Either solution can be used for incoming and outgoing spam filtering, the latter ensuring your business doesn't become the source of spam resulting in your email being blacklisted should your own security be compromised.
There is also the option of stripping off email attachments and replacing them with a link, reducing the size of emails and inboxes for your company and your clients.
If you want to know more about Secure Thinking's Spam Filtering solutions contact us on 0845 071 4690 or email info@securethinking.co.uk and we'll be happy to discuss your requirements.
IT Support Company Helps Lancashire Students Improve Communication Skills
Lee Hezzlewood, East Lancashire Regional Director of national IT Support company Eitex has been spending time back in school.
When Darwin Aldridge Community Academy asked for volunteers for their Words for Work program from local businesses, Lee whose business interest also include being a director of IT Security Specialists Secure Thinking, put himself forward without really knowing what he was letting himself in for.
"My initial understanding was more around helping the students with written communication," said Lee. "But when we attended our training it became apparent that the program had wider goals - to help the children with all aspects of verbal and non-verbal communication."
The Words for Work program is part of a national scheme intended to improve the communication skills of year 9 children (13-14yrs) and involves business volunteers showing the students how key communication skills are used in the real world of work and business.
The program at Darwin Academy consisted of 8 volunteers working with the students for 6 weeks. The first week the students made a presentation to the volunteers and then had their presentation skills and performance assessed with recommendations from the volunteers on how to improve their approach.
The second week involved the students and volunteers interviewing each other with ideas and suggested improvements again passed.
Over the remaining 4 weeks the students and the volunteers split into groups with the objective of creating a product highlighting good communication skills and then presenting it to the other groups.
The final week was supposed to be where the groups each presented their product to the other teams. But unfortunately one of the groups hit a rather major snag, as Lee explains.
"Our group was making a short slide-show based film with sound effects and music. Unfortunately, the finished product was placed on a USB memory stick in the care of one of the students who didn't make the session.
"It left the other members of the group devastated and they were worried how they were going to get around it!"
By a twist of fate, the school had decided to do yet another presentation of the products to a wider audience including the Principal Mr Loughran, and so an additional date was added to the program.
"This gave us a great way to turn our disaster into a massive positive. So between Imelda O'Keefe of IMS Coaching [the other volunteer in the group], the students and myself, we decided that the "Release Date" for our film would be after Easter and so we left the audience with a little bit of background on our project and a teaser as to what the final product will be like," said Lee. "All the volunteers thought this was the best lesson the students could have learned - how to turn what should have been a disaster into a really positive outcome."
The final presentations will now be held on the 6th May at Darwin Aldridge Community Academy.
When Darwin Aldridge Community Academy asked for volunteers for their Words for Work program from local businesses, Lee whose business interest also include being a director of IT Security Specialists Secure Thinking, put himself forward without really knowing what he was letting himself in for.
"My initial understanding was more around helping the students with written communication," said Lee. "But when we attended our training it became apparent that the program had wider goals - to help the children with all aspects of verbal and non-verbal communication."
The Words for Work program is part of a national scheme intended to improve the communication skills of year 9 children (13-14yrs) and involves business volunteers showing the students how key communication skills are used in the real world of work and business.
The program at Darwin Academy consisted of 8 volunteers working with the students for 6 weeks. The first week the students made a presentation to the volunteers and then had their presentation skills and performance assessed with recommendations from the volunteers on how to improve their approach.
The second week involved the students and volunteers interviewing each other with ideas and suggested improvements again passed.
Over the remaining 4 weeks the students and the volunteers split into groups with the objective of creating a product highlighting good communication skills and then presenting it to the other groups.
The final week was supposed to be where the groups each presented their product to the other teams. But unfortunately one of the groups hit a rather major snag, as Lee explains.
"Our group was making a short slide-show based film with sound effects and music. Unfortunately, the finished product was placed on a USB memory stick in the care of one of the students who didn't make the session.
"It left the other members of the group devastated and they were worried how they were going to get around it!"
By a twist of fate, the school had decided to do yet another presentation of the products to a wider audience including the Principal Mr Loughran, and so an additional date was added to the program.
"This gave us a great way to turn our disaster into a massive positive. So between Imelda O'Keefe of IMS Coaching [the other volunteer in the group], the students and myself, we decided that the "Release Date" for our film would be after Easter and so we left the audience with a little bit of background on our project and a teaser as to what the final product will be like," said Lee. "All the volunteers thought this was the best lesson the students could have learned - how to turn what should have been a disaster into a really positive outcome."
The final presentations will now be held on the 6th May at Darwin Aldridge Community Academy.
Wednesday, 23 March 2011
Eitex: National IT Support Company Helps East Lancashire Graduates
Eitex, a national IT Support business with offices in Nelson have improved the prospects of at least one local graduate by utilising the services provided by Pendle Borough Council’s Graduate Placement Scheme.
The scheme is designed to help local graduates find employment with local businesses, ensuring skills and experience is retained in the region whilst boosting the local economy.
Lee Hezzlewood, the Regional Director in charge of the Lancashire side of the business said “Although our Lancashire IT Support services are new for the organisation, we had a requirement to take on additional resources. There is a growing demand in the region for quality IT skills, particularly as more and more businesses attempt to make use of technology to improve their effectiveness and profitability.”
Marc McKinlay is the lucky graduate who was snapped up by Eitex, and Lee continued, “Marc has a range of skills and experience, which when added to his qualifications, bring significant benefits to our business and will enhance the quality of service we provide to our clients.”
Marc joined Eitex on the 1st of March and, after spending a couple of weeks training at Eitex’s UK Support Centre in Batley, Leeds is now fulfilling the role of 2nd line local support for Eitex customers across Lancashire and providing remote support to customers across the rest of the UK.
The scheme is designed to help local graduates find employment with local businesses, ensuring skills and experience is retained in the region whilst boosting the local economy.
Lee Hezzlewood, the Regional Director in charge of the Lancashire side of the business said “Although our Lancashire IT Support services are new for the organisation, we had a requirement to take on additional resources. There is a growing demand in the region for quality IT skills, particularly as more and more businesses attempt to make use of technology to improve their effectiveness and profitability.”
Marc McKinlay is the lucky graduate who was snapped up by Eitex, and Lee continued, “Marc has a range of skills and experience, which when added to his qualifications, bring significant benefits to our business and will enhance the quality of service we provide to our clients.”
Marc joined Eitex on the 1st of March and, after spending a couple of weeks training at Eitex’s UK Support Centre in Batley, Leeds is now fulfilling the role of 2nd line local support for Eitex customers across Lancashire and providing remote support to customers across the rest of the UK.
Subscribe to:
Posts (Atom)