Ted Bridis of AP reports "the government is warning financial institutions about a virus-like infection that has targeted computers at roughly 1,200 banks worldwide, trying to steal corporate passwords."

Experts said the BugBear software was programmed to determine whether a victim used an e-mail address that belonged to any of the 1,300 financial institutions listed in its blueprints. If a match was made, it tried to steal passwords and other information that would make it easier for hackers to break into a bank's networks.

In his last column for eWeek, Timothy Dyck comments on data security.

This year, California is again shaking the branches with SB 1386, a bill that goes into force just weeks from now on July 1. It requires any organization conducting business in California or?and this is a big "or"?storing personal information on any California resident to disclose to those customers when personal data is reasonably believed to have been compromised. The brand damage done by telling customers that a break-in has occurred, combined with the risk of lawsuits in case of noncompliance, add up to a powerful incentive to be serious about attack defenses and data encryption to limit damage if a break-in does occur. In addition, SB 1386 even exempts companies that have encrypted customer data from the notification requirement?one more example where this legislation makes good sense easier to cost-justify.