A.5 Security incidents in the US, China and UK
Security Incidents in the US
1. Review of Issues Related to the Loss of VA Information Involving the Identity of Millions of Veterans
http://www.va.gov/oig/pubs/VAOIG-06-02238-163.pdf
2. Administrative Investigation Loss of VA Information VA Medical Centre Birmingham, AL
http://www.va.gov/oig/pubs/VAOIG-07-01083-157.pdf
3. Review of Alleged Unauthorized Access to VA Systems
http://www.va.gov/oig/52/reports/2011/VAOIG-10-03516-229.pdf
4. Review of Alleged Mismanagement of the Systems to Drive Performance Project http://www.va.gov/oig/pubs/VAOIG-11-02467-87.pdf
5. Review of Information Security Issues Impacting VA Teleradiology Contracts http://www.va.gov/oig/52/reports/2010/VAOIG-09-03122-198.pdf
6. Review of Alleged Transmission of Sensitive VA Data Over Internet Connections http://www.va.gov/oig/pubs/VAOIG-12-02802-111.pdf
Security Incidents in China
1. 深圳10万孕产妇个人信息遭泄露
http://news.sina.com.cn/s/2008-06-10/020715710408.shtml
2. 黑客伪造WiFi热点盗取个人信息
http://tech.sina.com.cn/t/2012-02-25/04196767784.shtml
3. 程序员入侵证券公司导致40万条股民信息泄漏 http://finance.ifeng.com/stock/tzgs/20120420/5968175.shtml
4. 黑客攻破中电信网络盗取900个内部管理账户 http://tech.163.com/12/0604/14/835LP3N8000915BE.html
5. 黑客入侵政府、大学网站添加虚假信息倒卖上万假证
http://edu.ifeng.com/gaoxiao/detail_2012_07/26/16323038_0.shtml
6. 因信号系统受干扰深圳地铁发生暂停故障
http://tech.sina.com.cn/t/2012-11-16/01577802256.shtml
7. 空调故障导致12306网站三天内两次瘫痪 http://sh.eastday.com/m/20121227/u1a7091836.html
8. 上千万台计算机被盗取QQ及Q币 http://it.sohu.com/20120515/n343205468.shtml
9. 安全漏洞导致上千万银行卡客户信息泄露
http://finance.ifeng.com/bank/yhk/20120401/5854381.shtml
10. 黑客攻击DNS操控电脑净赚1400万美元
http:// news.sina.com.cn/w/2012-04-23/174624316823.shtml
11. 警方破获特大网银盗窃案 近百人被盗千万 http://finance.ifeng.com/roll/20120808/6888882.shtml
12. 亚马逊中国账户大规模被盗 涉及用户或超千人 http://it.sohu.com/20120907/n352615210.shtml 13. 超10万个假冒、钓鱼网站被处理
http://news.xinhuanet.com/2010-12/17/c_12889639.htm
Security Incidents in UK
1. Councils fined for serious data breaches
http://ico.org.uk/news/latest_news/2012/councils-fined-for-serious-data-breaches-130 22012
2. British Pregnancy Advice Service fined £200,000
http://ico.org.uk/news/latest_news/2014/british-pregnancy-advice-service-fined-2000 00-07032014
3. ICO fines Glasgow City Council £150K
http://ico.org.uk/news/latest_news/2013/Glasgow-city-council-fined-150000-0706201 3
http://ico.org.uk/news/latest_news/2013/~/media/documents/library/Data_Protection/
Notices/Glasgow-city-council-monetary-penalty-notice.ashx
4. Council fined for serious email disclosure
http://ico.org.uk/news/latest_news/2012/council-fined-for-serious-email-disclosure-15 022012
5. NHS Trust fined £325,000 following data breach affecting thousands of patients and staff
http://ico.org.uk/news/latest_news/2012/nhs-trust-fined-325000-following-data-breac h-affecting-thousands-of-patients-and-staff-01062012
6. Telford and Wrekin Council fined £90,000 following disclosure of vulnerable children’s data
http://ico.org.uk/news/latest_news/2012/telford-wrekin-council-fined-following-discl osure-of-vulnerable-childrens-data-06062012
7. Council fined £70,000 for losing highly sensitive data
http://ico.org.uk/news/latest_news/2012/council-fined-70000-for-losing-highly-sensiti ve-data-16052012
8. Repeated security failings lead to £180,000 fine for Ministry of Justice
http://ico.org.uk/news/latest_news/2014/repeated-security-failings-lead-to-180000-fin e-for-moj-26082014
9. ICO fines NHS Surrey for failing to check the destruction of old computers http://ico.org.uk/news/latest_news/2013/~/media/documents/library/Data_Protection/
Notices/nhs-surrey-monetary-penalty-notice.pdf
http://ico.org.uk/news/latest_news/2013/ico-issues-nhs-surrey-monetary-penalty-of-2 00000
10. Pay day loans company fined £175,000 over millions of spam texts
http://ico.org.uk/news/latest_news/2013/payday-loans-company-receives-175000-fine -over-spam-texts
11. London NHS Trust fined £90,000 for serious data breach
http://ico.org.uk/news/latest_news/2012/london-nhs-trust-fined-90000-for-serious-dat a-breach-21052012
12. Sony fined £250,000 after millions of UK gamers’ details compromised http://ico.org.uk/news/latest_news/2013/ico-news-release-2013
http://ico.org.uk/news/latest_news/2013/~/media/documents/library/Data_Protection/
Notices/sony_monetary_penalty_notice.ashx
13. Belfast Trust fined £225,000 after leaving thousands of patient records in disused hospital
http://ico.org.uk/news/latest_news/2012/belfast-trust-fined-225000-after-leaving-thou sands-of-patient-records-in-disused-hospital-19062012
14. Sensitive details of NHS staff published by Trust in Devon
http://ico.org.uk/news/latest_news/2012/sensitive-details-of-nhs-staff-published-by-de von-trust-06082012
Appendix B
The Empirical Experiment (Appendix to Chapter 5)
171