Jail time for executives seems a little excessive for some employee merely failing to apply a security patch...
On the other hand, this settlement shouldn't have been capped at such a ridiculously low amount.
On the other hand, this settlement shouldn't have been capped at such a ridiculously low amount.
No, it's not. If you collect personal information of almost 150 million people, you have to take measures to protect that data.
If you fail to do that, you can't just say "oops, I didn't mean that"...
https://republicans-oversight.house.gov/wp-content/uploads/2...
It’s not “some employee”. It’s an entire management hierarchy that failed to prioritise and budget for and create a culture around security best practices.
If this was the US Airforce who lost an armed nuclear ICBM the commanding officer who was ok with this ”whoopsie” would have to explain him or herself to quite a few officials.
I disagree. I think it means they owe a hundred million people (a) an offer to opt-in to their service and (b) a share of their profits for doing so.
...and leaking information about every working age adult in the US.
And having a music major as chief security officer.
And having sensitive data stored as plaintext.
Their entire business is about managing information. They failed to do the only thing they are supposed to do.