Federal Trade Commission says payroll provider Ceridian and immigration services software provider Lookout Services have settled charges that they failed to put sufficient security measures in place to protect sensitive information relating to 65,000 people. Ceridian failed to encrypt personal information, instead storing it in clear text for an indeterminate amount of time. Both companies have agreed to implement a comprehensive information security program and to obtain independent, third-party security audits every other year for 20 years, the FTC says. Lookout Software also failed to store social security numbers of 37,000 registered using its software.”]
Source: https://www.darkreading.com/attacks-breaches/ftc-settles-with-companies-over-exposed-records