Mastodawn

Regarding the data breach involving clubs and venues in Australia:

A company called Outabox got a contract to do venue signin software. They contracted a Philoipines group to do the actual work, ensuring all data was stored outside of Australia. After 4 years they broke off the deal without payment and grabbed the gathered data and ran. The Australian running the scam has been arrested.

SOME of the venues where Outabox systems are installed:

Breakers Country Club
Bulahdelah Bowling Club
Central Coast Leagues Club
ClubMex Club Mayfield
RSLCity of Sydney RSL
DiggersEttalong diggers
East Maitland Bowling Club
East Cessnock Bowling Club
Fairfield RSL Club
Gwandalan Bowling Club
Halekulani Bowling Club
Hornsby RSL Club
Ingleburn RSL Club
Merivale
Club Old Bar
Club Terrigal
The Tradies Dickson
Erindale Vikings
West Tradies

For more information and to check to see if you are affected go to https://haveibeenoutaboxed.com/

#Australia #DataBreach #Outabox #WhyDoTheyNeedThisData

Have I been outaboxed

Has your personal data been compromised?

Show thread

Peter May 3, 2024

This is a problem, sure. Data storage where personal identifying information is concerned will always be a problem.

My biggest concern, by far, is: WHY WAS STORAGE OF THIS DATA DEEMED NECESSARY?

Just view ID and issue a member's card, or let visitors keep signing in on paper. There was never any need to scan in photo ID. None.

#ClubsNSW

Show thread

bignose May 3, 2024

Personal data on users of a service, is dangerous like toxic waste.

It's not an asset, it's a liability, to be minimised and disposed of where no one can ever access it.

Hold onto it long enough, it *will* cause a disaster that spills far beyond your organisation. The more of it you hold, the longer you hold it, the worse that is.

Ideally: Never collect personal data. Practically: Collect only what *truly is necessary* for the function, and destroy it *as soon as you can*. Stop trying to extract "value" from it.

https://craphound.com/articles/2020/03/18/data-is-the-new-toxic-waste/

@PeterLG

#Privacy #Security #PersonalData #ToxicLiability