Avanti Markets’ vending company PCI Breach

On July 4, 2017, Avanti Markets of Tukwila, Washington discovered some of their self check out payment kiosks had been affected by malware which stole payment card information.  Name, credit card number, and expiry date information was stolen included some customer biometric data.  

Avanti Market self checkout kiosks allow breakroom customers to buy food and drinks with cash, credit cards, or via a fingerprint scan (biometrics.)  

Avanti Markets’ vending company PCI Breach

On July 4, 2017, Avanti Markets of Tukwila, Washington discovered some of their self check out payment kiosks had been affected by malware which stole payment card information.  Name, credit card number, and expiry date information was stolen included some customer biometric data.  

Avanti Market self checkout kiosks allow breakroom customers to buy food and drinks with cash, credit cards, or via a fingerprint scan (biometrics.)  

Colorado Medicaid Data Breach of 822

From March 1 to May 10, 2017, an Internet URL made 12 Medicaid billing reports of PHI available.  The billing reports included names, Medicaid numbers, doctors names, costs, and services rendered for approximately 822 people.  SSNs, dates of birth, and addresses of patients were not included.  The Medicaid program is managed (and reviewed for security) by the Colorado Department of Health Care Policy and Financing.  Part of the Medicaid payment system is provided by contractor DXC Technology which went live March 1st.

When DXC Technology went live on March 1st, providers immediately began to complain about lag and denials in requests for reimbursement.  Some smaller doctor and therapist organizations claim to have been forced to take out loans or use credit cards to make their employee payroll.  DXC Technology has claimed they have no reason to believe this information has been used inappropriately and is offering one free year of ID theft protection.
 

Over 2/3 of states in cyber commitment

A compact of commitment by 35 states and 3 American territories has been signed for a cyber security partnership.  The commitment by each governor is for each of their governments to partner with state universities in the development of cyber policy, incident response, and cyber workforce shortages.

The nature of the compact has been executed through more than 30 governors signing a dozen executive orders, 17 initiatives and 14 signed legislation bills.  One example is Virginia’s recently-approved recipients of the Commonwealth’s first Cybersecurity Public Service Scholarship established during the 2016 General Assembly Session which provides up to $20,000 in tuition assistance to full-time students pursuing cybersecurity degrees in return for one year of public service per scholarship.

WayCare Accident Prediction in Las Vegas

September 2017, the startup WayCare will begin a 6 month pilot of artificial intelligence (AI) in Las Vegas.  The AI will monitor traffic of I-15 and US 95 then predict congestion and possible traffic accidents.  The intent is to predict within 2 hours where first responders within a coalition of city, state, and county agencies should place their vehicles.  The hope is that by preparing resources ahead of time that they may be able to prevent accidents.

Some of the analytics may assess predictions based on the angle of the sun, debris on a lane, or perhaps even a dust cloud.  The WayCare project is estimated to cost tens of thousands of dollars.  The next cities which may potentially explore a pilot with WayCare are Ft Lauderdale and Tampa, Florida.

Information Assurance & Cyber Security Research and Education, a 501(c)(3)