4 ms·
> Actually this Chris guy has a point. I don't call it breach either. It's PII data exposure but it is a serious exposure. At least California defines it as >
by hrimfaxi 11mo ago
> Actually this Chris guy has a point. I don't call it breach either. It's PII data exposure but it is a serious exposure.
At least California defines it as
> unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person.
https://oag.ca.gov/privacy/databreach/reporting https://oag.ca.gov/privacy/databreach/reporting
- bo1024 11mo agoSo I guess if you authorize the entire world to read the data, it’s not a breach.
- SigmaEpsilonChi 11mo agoIf nobody reads the data it is not a breach.
- Benjamin_Dobell 11mo agoSo the junior engineer who couldn't secure an endpoint implemented thorough request logging and auditing? Impressive.