516
2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed (www.tomsguide.com)
submitted 2 years ago by to c/technology@lemmy.world
141 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 years ago (3 children)

PII data at rest (i.e. in a database) must be encrypted.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] [S] 1 point 2 years ago (2 children)

    If the DB is running, it's not at rest. Clients side encrypted data would be the way.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I think my definition is pretty standard: https://en.m.wikipedia.org/wiki/Data_at_rest

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 1 point 2 years ago

    The catch is interpretation, which the wiki points out:

    “Inactive data” could be taken to mean data which may change, but infrequently.

    Any company like this one would consider this data "in use" but "inactive" because any person could need a loan at any point.

  • permalink
  • fedilink
  • source
  • parent