Amidst breach reports, including the recent data loss incident at a private health insurer, The Age reports on cybersecurity firm FireEye’s comments that the government “needs to introduce mandatory data breach disclosure laws sooner rather than later after more than 30,000 iiNet customers had their passwords hacked.” FireEye’s Phil Vasic said while breaches may be common, disclosing the incidents is not. "Three years is too long to wait before disclosing a breach,” Vasic said, referring to the Catch of the Day breach. In that incident, the online shopping company waited three years to notify customers of the breach. “We can and should do better,” Vasic said.
Full Story