#dataprivacy

Att quickly discovered some unauthorized access to customer online accounts in August. User is and answers to security questions were obtained from outside of att and used to log in. Impacted accounts have been locked by att.

If you were one of the people that did download the list, I received an email from Cybersecurity letting me know I broke policy by accessing sensitive information. They only asked to respond back to confirm any copies have been deleted, and if you distributed the list, to let them know where you shared it. My director was CCd on the email, but they didn’t think it was a big deal and moved on. There will only be action taken if you don’t respond to the email.

I believe this is a major concern perhaps being overlooked.

I wonder if the American public or even our government realize how vulnerable transferring sensitive american federal health data across the world globe to another country in the far east.

Please discuss. Maybe not an issue but personally it makes me a little concerned.

For whatever reason I think they are tracking us? What does this forum think?

They can see your email address in the metadata. Saw the manager's version of the job aid. Probably not a huge shocker.

All our HR data is handle by AWS ....really?
Try to contact a human that works in AT&T HR you will never find ....anyone.
They subcontract all to apps or other companies.
We own nothing. Not even a server with our own data.
Good Idea, good implementation from our Bachelor in Arts Jeremy.
Let's hold all data for our network in Amazon Prime.

Dozens of Oracle customers impacted by Clop data theft for extortion campaign: Researchers said malicious activity dates back to early July and active exploitation was observed two months ago.

Clop, the notorious ransomware group, began targeting Oracle E-Business Suite customers three months ago and started exploiting a zero-day affecting the enterprise platform to steal massive amounts of data from victims as early as Aug. 9, Google Threat Intelligence Group and Mandiant said in a report Thursday.

Was the WF rush to the cloud Risky? This risk averse employee thinks all of our data is at risk everyday it is on a cloud. Stupid is as stupid does.

I can only imagine how many people will experience identity theft as a result of this.

“ LOUISVILLE, Ky.--(BUSINESS WIRE)-- Humana Inc. (NYSE: HUM) and Providence, a Washington-based health system, today announced a pioneering initiative to streamline and secure data exchange between payers and providers – setting a new standard for interoperability in support of value-based care.”

I bet in coming days, we will hear about lawsuits where major data breaches occurred as a result to this. Mark your calendars.

A reminder for those waiting for the next CES. Your feedback is being collected in realtime. Employees sentiment is monitored by Aware, an AI service that monitors internal dialogue.
If you were wondering why the CES seems diluted, it is because they already have the data they need

https://www.cnbc.com/amp/2024/02/09/ai-might-be-reading-your-slack-teams-messages-using-tech-from-aware.html

Verint is the vendor, they track activity while logged into the network. Not all departments have this, most do not. That probably will change at some point.

Essentially it measures activity, idle and inactive time as well as time in applications. Some activities can be flagged, like people that write a book in MS Word by putting a coffee cup on their keyboard, mouse jigglers, etc. Uncertain about putting yourself in a Teams call meeting or other ways to trick the system.

Check your entitlements for Verint and if you have it, assume your clicks are being tracked in addition to network login and out activity. Again, I assume everyone will have it at some point, but you probably don’t as of now.

Who is looking forward to our every word being monitored?!

https://finance.yahoo.com/news/oracle-investigating-hacks-customers-e-214339029.html

Previously, ORCL never acknowledge a security breach !

Is it against the code of conduct for an employee to input Truist proprietary information into an AI platform like ChatGPT? To my knowledge, the only AI tool currently authorized at Truist is CoPilot, and it’s being tested by a limited group of employees. A colleague of mine consistently distributes detailed meeting notes within five minutes of discussion, which strongly suggests AI assistance. Since this colleague works remotely, it’s likely they use a personal computer to access ChatGPT and then send the notes to their Truist email. I suspect this could breach the code of conduct, but I’d appreciate any insights or clarifications from others.

Mutual of America Financial Group Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (August 22, 2025) – The law firm of Federman & Sherwood announces that it is investigating a data breach involving Mutual of America Financial Group, which recently filed a notice of data breach with the Attorney General of California.

According to the company’s notice, on July 22, 2025, Mutual of America inadvertently.

and the names of those participating in the settlement going to be public, do you think Stankey would use that information as one of the "metrics" to fire employees that make a claim for the money?

Seems this hack is being kept quite with all the uproar about Accenture suing L3Harris for $81 million and the Accenture I.T. contract ending with L3Harris on 12/15/2025. Karma? 450+ employees "sold" to Accenture without any severance options and then a year later the contract is terminated. This from a company that requires the employees to take yearly ethics classes.

https://www.cyberdaily.au/security/12488-exclusive-world-leaks-ransomware-gang-claims-hack-of-defence-contractor-l3harris-list

Oops

Since dell will never tell us this info on their own and will pretend it didnt happen.....

https://finance.yahoo.com/news/hr-giant-workday-says-hackers-130410698.html

https://techcrunch.com/2025/08/18/hr-giant-workday-says-hackers-stole-personal-data-in-recent-breach/

Workday, one of the largest providers of human resources technology, has confirmed a data breach that allowed hackers to steal personal information from one of its third-party customer relationship databases.

Sometime in 2020 with pandemic closures, the company installed monitoring applications on laptops that randomly captures screenshots and reported meta information. Then came tracking the badge swipes at doors to ensure that all employees ordered to return to the office, did so and did so on time. IT can report how long you spend on Zoom calls, emails, spreadsheets, salesforce or if you’ve got blank space in your calendar. They’ve reportedly started tracking mobile phone location data for all employees- including once exempt sales and admin staff. If you have a company phone, and don’t live in Cali, you are now most likely in the surveillance crosshairs. Enjoy eating lunch or leaving at 5:01 pm knowing that your location is being watched. What’s next a loyalty test?