Ind. AG sues WellPoint for $300K over data breach

http://www.businessweek.com/ap/financialnews/D9J5JNK00.htm

The Indiana attorney general's office is suing health insurance giant
WellPoint Inc. for $300,000 for waiting months to notify customers
that their medical records, credit card numbers and other sensitive
information may have been exposed online.

The lawsuit filed Friday in Marion County accuses WellPoint of
violating a state law that requires businesses to provide notification
of data breaches in a timely manner.

State officials say the personal records were exposed for at least 137
days between last October and March. The suit says WellPoint learned
of the problem Feb. 22 but didn't start notifying customers until
June.

WellPoint has said 470,000 individual insurance customers might have
been affected.

Messages seeking comment were left with WellPoint spokespeople.

University Posts Info Of 40K Students

http://www.npr.org/templates/story/story.php?storyId=130903298

The Social Security numbers, grades and other personal information of
more than 40,000 former University of Hawaii students were posted
online for nearly a year before being removed this week, The
Associated Press has learned.

University officials told the AP that a faculty member inadvertently
uploaded files containing the information to an unprotected server on
Nov. 30, 2009, exposing the names, academic performance, disabilities
and other sensitive information of 40,101 students who attended the
flagship Manoa campus from 1990 to 1998 and in 2001. A handful of
students from the West Oahu campus were included in the security
breach.
[..]