UMMC FACING CLASS ACTION LAWSUIT FOR ENABLING CYBERSTALKING CAMPAIGN

Summary from the TLDR InfoSec newsletter

The University of Maryland Medical Center (UMMC) is being sued by current and former employees for enabling a pharmacist to conduct cyberstalking due to a lack of security practices. The pharmacist used a keylogger and installed spyware on at least 400 computers in UMMC to obtain employees' usernames and passwords to access the accounts of about 80 female co-workers for nearly a decade. The hacker hacked victims' cloud accounts to steal private information and used internet-connected cameras to watch the victims in their homes.