Posted on Leave a comment

Meta fined $263M over 2018 security breach that affected ~3M EU users – TechCrunch

Latest
AI
Amazon
Apps
Biotech & Health
Climate
Cloud Computing
Commerce
Crypto
Enterprise
EVs
Fintech
Fundraising
Gadgets
Gaming
Google
Government & Policy
Hardware
Instagram
Layoffs
Media & Entertainment
Meta
Microsoft
Privacy
Robotics
Security
Social
Space
Startups
TikTok
Transportation
Venture
Events
Startup Battlefield
StrictlyVC
Newsletters
Podcasts
Videos
Partner Content
TechCrunch Brand Studio
Crunchboard
Contact Us
Meta has been fined €251 million (around $263 million) in the European Union for a Facebook security breach that affected millions of users which the company disclosed back in September 2018.
The penalty, issued on Tuesday by Ireland’s Data Protection Commission (DPC) — enforcing the bloc’s General Data Protection Regulation (GDPR) — is far from being the largest GDPR fine Meta has been hit with since the regime came into force over five years ago but is notable for being a substantial sanction for a single security incident.
The breach it relates to dates back to July 2017 when Facebook, as the company was still known then, rolled out a video upload function that included a “View as” feature which let the user see their own Facebook page as it would be seen by another user. 
A bug in the design allowed users making use of the feature to invoke the video uploader in conjunction with Facebook’s ‘Happy Birthday Composer’ facility to generate a fully permissioned user token that gave them full access to the Facebook profile of that other user. They could then use the token to exploit the same combination of features on other accounts — gaining unauthorized access to multiple users’ profiles and data, per the DPC.
Between September 14 and September 28, 2018, the watchdog said unauthorised persons used scripts to exploit this Facebook vulnerability and gained the ability to log on as the account holder to approximately 29 million Facebook accounts globally — around 3 million of which were based in the EU/European Economic Area, meaning they fall under the DPC’s enforcement powers.
Categories of personal data impacted by the breach included Facebook users’ full names; email addresses; phone numbers; location; places of work; dates of birth; religion; gender; posts on timelines; groups of which they were a member; and children’s personal data.
The broad sweep of impacted personal data is likely to have influenced the size of the fine.
On Tuesday the Irish regulator issued final decision on two inquiries it opened into the 2018 incident: one decision covers Meta’s breach notification, as the GDPR requires prompt and comprehensive reporting of major security incidents — the second concerns the rules on data protection by design and default.
In both cases the DPC found Meta infringed the bloc’s GDPR.
The full sanction breaks down as follows: Meta has been fined €11 million in relation to its first decision, with the DPC finding that Meta’s breach notification did not include all the information it “could and should have”; nor did the company fully document the facts of the breach and the steps taken to remedy the issue.
On top of that, Meta has been fined €240 million in relation to the second decision where the DPC confirmed the company violated GDPR principles of data protection by design as it did not have appropriate measures in place to protect people’s data from unintended processing.
Commenting in a statement, DPC deputy commissioner Graham Doyle said: “This enforcement action highlights how the failure to build in data protection requirements throughout the design and development cycle can expose individuals to very serious risks and harms, including a risk to the fundamental rights and freedoms of individuals.
“Facebook profiles can, and often do, contain information about matters such as religious or political beliefs, sexual life or orientation, and similar matters that a user may wish to disclose only in particular circumstances. By allowing unauthorised exposure of profile information, the vulnerabilities behind this breach caused a grave risk of misuse of these types of data.”
Another notable element of the enforcement under the DPC’s two commissioners, Dr. Des Hogan and Dale Sunderland — who took over from (formerly the sole) commissioner Helen Dixon earlier this year — is that no objections were raised to Ireland’s draft decision by peer authorities.
“The DPC is grateful for the cooperation and assistance of its peer EU/EEA supervisory authorities in this case,” the regulator wrote in a press release.
Critics of the DPC under Dixon accused the regulator of routinely under-enforcing the GDPR on Meta and other tech giants. And many of its draft decisions on Big Tech at that time were disputed by its peers. A number of enforcements against Meta specifically entailed very lengthy dispute proceedings — with some requiring binding decisions from the European Data Protection Board to conclude the process.
So it’s notably that this latest enforcement against Meta, which the DPC says was submitted as a draft decision to the GDPR cooperation mechanism in July 2024, pass through unscathed.
Reached for a response to the penalty, Meta spokeswoman Emily Westcott emailed a statement in which the company wrote: “This decision relates to an incident from 2018. We took immediate action to fix the problem as soon as it was identified, and we proactively informed people impacted as well as the Irish Data Protection Commission. We have a wide range of industry-leading measures in place to protect people across our platforms.” 
Back in September, the DPC issued another decision against Meta vis-a-vis a 2019 security breach — in that instance the company was fined €91 million in relation to an incident in which “hundreds of millions” of users’ passwords had been stored in plaintext on its servers. 

The 10 largest GDPR fines on Big Tech

Topics
Senior Reporter
Natasha is a senior reporter for TechCrunch, joining September 2012, based in Europe. She joined TC after a stint reviewing smartphones for CNET UK and, prior to that, more than five years covering business technology for silicon.com (now folded into TechRepublic), where she focused on mobile and wireless, telecoms & networking, and IT skills issues. She has also freelanced for organisations including The Guardian and the BBC. Natasha holds a First Class degree in English from Cambridge University, and an MA in journalism from Goldsmiths College, University of London.
Tesla offers free Supercharging for Model S with a catch

Meta updates its smart glasses with real-time AI video

Google DeepMind unveils a new video model to rival Sora

BlackBerry sells Cylance for $160M, a fraction of the $1.4B it paid in 2018

Google names its new India chief

Open source software companies that go proprietary: A timeline

UnitedHealth’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet

Subscribe for the industry’s biggest tech news
Every weekday and Sunday, you can get the best of TechCrunch’s coverage.
TechCrunch's AI experts cover the latest news in the fast-moving field.
Every Monday, gets you up to speed on the latest advances in aerospace.
Startups are the core of TechCrunch, so get our best coverage delivered weekly.
By submitting your email, you agree to our Terms and Privacy Notice.
© 2024 Yahoo.

source

Posted on Leave a comment

Theatre review: a masterful Simon Russell Beale ignites The Invention of Love – Financial Times

Keep abreast of significant corporate, financial and political developments around the world. Stay informed and spot emerging risks and opportunities with independent global reporting, expert commentary and analysis you can trust.
Keep reading for $1
Find the plan that suits you best.

Premium access for businesses and educational institutions.

Check if your university or organisation offers FT membership to read for free.

source

Posted on Leave a comment

Bowl game schedule today: Everything to know about Frisco Bowl – West Virginia vs. Memphis – USA TODAY

It’s all right, college football fans. You can admit it. We get you. Most of you are just waiting for the weekend, when the truly meaningful postseason games in the Football Bowl Subdivision will take place. But hey, non-playoff football is still better than no football, right?
The bowl season continues Tuesday night with a single game on the lineup in the Lone Star State. Here’s a quick look at the participating teams, one of which had a mostly enjoyable fall in 2024 while the other is now turning an eye toward the future with a nod to its past.
Time/TV: 9 p.m. ET, ESPN
Why watch: The first ranked team to take the field in the bowl season seeks a second win against power conference competition. The Tigers overcame an early setback against Navy to win six of their last seven, while the Mountaineers will be in the midst of a change in leadership following an uneven Big 12 campaign. Offensive coordinator Chad Scott will coach WVU in the bowl game following Neal Brown’s dismissal. There will at least be a veteran hand at the controls in QB Garrett Greene, though he’ll want to forget his most recent outing quickly in which an interception and lost fumble helped Texas Tech on its way to a 52-15 romp. Another high-octane offense awaits. Memphis puts up over 35 points a game, led by the accomplished triumvirate of QB Seth Henigan, RB Mario Anderson Jr. and WR Roc Taylor.
NEW BOSSES:Where does Bill Belichick rank among the coaching hires?
BEST TO WORST:Ranking the 35 college football bowl games
Why it could disappoint: This has all the makings of a mismatch. There’s some optimism in Morgantown with the pending return of Rich Rodriguez, but fielding a competitive team here with all the portal departures will be difficult.
The USA TODAY app gets you to the heart of the news — fast.Download for award-winning coverage, crosswords, audio storytelling, the eNewspaper and more.

source

Posted on Leave a comment

MN Lottery Results: Powerball, Lotto America winning numbers for Dec. 16, 2024 – SC Times

The Minnesota Lottery offers multiple draw games for those aiming to win big. Here’s a look at Dec. 16, 2024, results for each game:
09-30-33-57-61, Powerball: 17, Power Play: 2
Check Powerball payouts and previous drawings here.
05-17-18-34-50, Star Ball: 08, ASB: 05
Check Lotto America payouts and previous drawings here.
1-2-0
Check Pick 3 payouts and previous drawings here.
07-09-13-15-30
Check North 5 payouts and previous drawings here.
16-25-27-29-43
Check Gopher 5 payouts and previous drawings here.
Feeling lucky? Explore the latest lottery news & results
Winning lottery numbers are sponsored by Jackpocket, the official digital lottery courier of the USA TODAY Network.
Tickets can be purchased in person at gas stations, convenience stores and grocery stores. Some airport terminals may also sell lottery tickets.
You can also order tickets online through Jackpocket, the official digital lottery courier of the USA TODAY Network, in these U.S. states and territories: Arizona, Arkansas, Colorado, Idaho, Maine, Massachusetts, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, New Mexico, New York, Ohio, Oregon, Puerto Rico, Texas, Washington, D.C., and West Virginia. The Jackpocket app allows you to pick your lottery game and numbers, place your order, see your ticket and collect your winnings all using your phone or home computer.
Jackpocket is the official digital lottery courier of the USA TODAY Network. Gannett may earn revenue for audience referrals to Jackpocket services. GAMBLING PROBLEM? CALL 1-800-GAMBLER, Call 877-8-HOPENY/text HOPENY (467369) (NY). 18+ (19+ in NE, 21+ in AZ). Physically present where Jackpocket operates. Jackpocket is not affiliated with any State Lottery. Eligibility Restrictions apply. Void where prohibited. Terms: jackpocket.com/tos.
This results page was generated automatically using information from TinBu and a template written and reviewed by a St. Cloud Times editor. You can send feedback using this form.

source

Posted on Leave a comment

UXUY supports the BNB Chain meme airdrop event, on-chain transactions enjoy 0 Gas fee privilege – ChainCatcher

Chaincatcher news, the multi-chain trading platform UXUY, incubated and invested by Binance Labs, officially partners with the BNB Chain meme airdrop event. During the event, users trading BNB Chain ecosystem memes on UXUY iOS, Android, and Telegram DEX (@UXUYDexBot) will enjoy 0 Gas fee trading benefits.
The BNB Memecoin event will further incentivize the development of the meme community. BNB Chain will rank memes based on a weighted calculation of 24-hour trading volume, market capitalization, and price increase, with the top-ranked meme becoming the winner of the day. The BNB Chain community will purchase meme tokens of the winning meme worth 33 BNB for the airdrop.
UXUY will enable a red envelope feature for the winning meme project and distribute on-chain meme red envelopes to the community, further expanding the number of Meme Coin holders and its influence.

source

Posted on Leave a comment

Together Women’s Health Expands into Georgia with Advanced Gynecology Affiliation – Business Wire

DETROIT–()–Together Women’s Health (TWH) is pleased to announce it has entered the Georgia market with the affiliation of Advanced Gynecology. This new affiliation adds four board-certified physicians and surgeons, three advanced practice providers, two surgery centers, and three additional locations to the TWH network. It marks TWH’s first affiliation in Georgia, bringing the total number of affiliations to 18. Together Women’s Health is a women’s health-focused management service organization, committed to partnering with leading physicians to build a premier network of women’s health services in the U.S. TWH’s affiliate network consists of 18 practices with over 175 providers delivering women’s health services at over 40 locations throughout Michigan, Illinois, Alabama, Colorado, Mississippi, Missouri, and Georgia.

Advanced Gynecology is a leading specialty urogynecology practice in Georgia. Dr. Brian Raybon founded the practice 15 years ago in Athens, Georgia. They have recruited incredible physician partners with urogynecologists Dr. Alexcis Ford and Dr. Nina Metcalfe, and gynecologist Dr. Lina Millan, and have expanded into the Atlanta market with locations in Buckhead and Alpharetta. Additionally, their Athens and Alpharetta locations are co-located with an ambulatory surgery center (ASC), providing convenience and improving the complete patient experience. “We are looking forward to joining an organization whose vision of providing comprehensive and compassionate women’s care aligns so strongly with ours,” said Dr. Brian Raybon. “We know this new partnership will benefit our community and allow us to deliver the best possible outcomes for our patients.”
The Advanced Gynecology team provides specialized care for conditions such as urinary incontinence, overactive bladder, fecal incontinence, pelvic organ prolapse, and fibroids. They emphasize robotic-assisted procedures and minimally invasive laparoscopic surgeries like a hysterectomy, and sacrocolpopexy, many of which are performed conveniently in their ASC. Their approach combines cutting-edge technology and patient-focused care to deliver effective solutions with faster recovery time.
“We are excited to announce our expansion into Georgia through the partnership with Advanced Gynecology,” said Anthony Ahee, CEO of Together Women’s Health. “Their dedication to delivering excellent, high-quality care reflects our shared mission to advance women’s healthcare. This partnership marks an important step in our growth as we work together to support Advanced Gynecology’s team in providing exceptional care to the women and families of Georgia.”
This affiliation is another step in Together Women’s Health’s strategy to be the most trusted name in women’s health. To learn more about a partnership with Together Women’s Health, visit togetherwomenshealth.com or contact us at partner@togetherwomenshealth.com.
About Together Women’s Health
Headquartered in Detroit, MI, Together Women’s Health (“TWH”) is a women’s health management services organization committed to partnering with leading physicians to build a premier network of obstetricians and gynecologists. TWH, recently named on the Inc. 5000 list of fastest growing companies in America, supports its affiliated practices and physician partners throughout multiple states with strategic guidance, administrative resources (including revenue cycle management, marketing, human resources, finance, accounting, and IT), operational expertise and capital, thereby allowing physicians to focus on clinical excellence and serving their communities. TWH is building a network of top clinicians in a physician-led culture. For more information about Together Women’s Health, please visit togetherwomenshealth.com.
About Shore Capital Partners
Shore Capital, a Chicago-based private equity firm with offices in Nashville, is an investor in lower middle market companies in the Healthcare, Food and Beverage, Business Services, Industrial, and Real Estate industries. Shore’s strategy is to support management partners to grow faster with less risk through access to capital, world-class board and operational resources, and unmatched networking, development, and shared learnings across the portfolio. From 2020-2023, Shore received recognition from Inc Magazine as a 4x Top Founder Friendly Investor and by Pitchbook Research for being the global leader in Private Equity total deal volume. Shore targets investments in proven, successful private companies with superior management teams, stable cash flow, and significant potential to grow through industry consolidation and organic growth to generate value for shareholders. Shore has $9.1 billion of assets under management and in additional investment platforms to which it provides business and operational consulting services. For more information on these awards and investment platforms, please visit: www.shorecp.com.
Suzanne Cooper, Vice President of Marketing
suzanne.cooper@togetherwomenshealth.com
Suzanne Cooper, Vice President of Marketing
suzanne.cooper@togetherwomenshealth.com

source

Posted on Leave a comment

Opensea’s Cayman Islands Registration Sparks Airdrop Rumour – Crypto Times

Blur’s dominance, particularly its season-based token rewards, has led to an explosion in trading volumes and user engagement.
Written By:
Dishita Malvania
The NFT world is buzzing with excitement as speculation mounts over OpenSea’s potential token launch and airdrop, fueled by a recent registration in the Cayman Islands and a cryptic announcement from the platform’s co-founder. 
After a quiet but intriguing statement by OpenSea CEO Devin Finzer on November 4, hinting at a major relaunch in December, rumors have been swirling that the revamped platform could include a lucrative airdrop for loyal users.
The news of OpenSea’s registration in the Cayman Islands, shared on December 14 by pseudonymous researcher Waleswoosh, has further ignited the firestorm of speculation. This development has sparked intense conversations within the NFT community, especially as OpenSea has long been a key player in the market. 
The idea of rewarding early users with an airdrop, similar to strategies seen with competitors like Blur and Magic Eden, has many hopeful for a major payout.
Since its launch, OpenSea has been under pressure from emerging competitors, most notably Blur, which has captured market share through a successful airdrop strategy. Blur’s dominance, particularly its season-based token rewards, has led to an explosion in trading volumes and user engagement. 
Reports even surfaced of users earning up to $11 million in tokens after Blur’s second-season rewards. Magic Eden also tried its hand at an airdrop with its ME token, though it faced challenges after an initial surge in price, with the token’s value dropping nearly 70% amid user complaints.
OpenSea, in a bid to reclaim market dominance, has taken its own steps to stay competitive, including the introduction of zero fees in February. But despite these efforts, Blur has continued to overshadow the NFT marketplace leader in trading volumes. As a result, there’s growing speculation that OpenSea may look to follow in Blur’s footsteps, issuing tokens as a way to both attract new users and reward loyal ones.
While the NFT community eagerly awaits official word on an OpenSea token, many users are hopeful that the platform will use the airdrop as a way to rebuild trust and loyalty, particularly after the boom in NFT sales during 2021 and 2022. However, concerns remain about whether the airdrop will appropriately account for the significant trading activity from those peak years.
Also Read: NFT Sales Spikes 16% As Crypto Market Witnesses Volatility


Your window into the world of Crypto, DeFi, and Web3. Stay ahead of the curve with authentic news, sharp analysis, and exclusive in-sight reports only on The Crypto Times.
All News
AI News
Exclusive
Explained
Editorial
About Us
Editorial Policy
Press Release
Contact Us
Career
Advertise With Us
© 2024 Protocols And Tokens Pvt. Ltd.

source