article thumbnail

City of Dallas has set a budget of $8.5 million to mitigate the May Royal ransomware attack

Security Affairs

The City experts believe that the group specifically targeted a prioritized list of servers using legitimate Microsoft system administrative tools. Early on the morning of Wednesday, May 03, 2023, the group started executing the ransomware on the City of Dallas. The Dallas City Council has approved a budget of $8.5

article thumbnail

First Multistate HIPAA Data Breach Lawsuit May Signal Increased State Interest in Data Security Enforcement

Data Matters

The stolen information allegedly included names and identifying information, hashed passwords, security questions and answers, family information, Social Security numbers, lab results, health insurance information, doctor’s names, and medical conditions, among other things.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

List of data breaches and cyber attacks in February 2020 – 623 million records breached

IT Governance

Columbus County Schools gives update after systems wiped by cyber attack (5,673). The US Defence Information Systems Administration discloses 2019 cyber attack (unknown). Pacific Specialty Insurance Company notifies plan members of 2019 data breach (unknown). Idaho Central Credit Union reports two data breaches (unknown).

article thumbnail

£60 million in recovery costs for Norsk Hydro after refusing ransom demand

IT Governance

On 19 March 2019, Norsk Hydro’s systems were infected with the LockerGoga ransomware. TrendMicro’s analysis into the ransomware found that it was the same system administration tool abused by the likes of SOREBRECT and Bad Rabbit. How the incident occurred.

article thumbnail

Georgia Governor Vetoes Broad-Reaching Computer Crime Bill, Highlighting Debate Around Bug Bounty Programs

Data Matters

Specifically, researchers believed that the current version of SB 315 could chill security research—both the purely academic and the “white hats”—ultimately discouraging individuals from identifying vulnerabilities in networks and alerting system administrators of the issues. The incident and Uber’s response prompted the U.S.

article thumbnail

Italy: Privacy law integrating the GDPR adopted, what to do?

DLA Piper Privacy Matters

This is good news as for instance it might introduce an exemption to the need of prior consent for the processing of health data by insurance companies as part of the data processing activities functional to the insurance policies which is currently provided by the above mentioned general authorization issued under the current Italian Privacy Code.

GDPR 45
article thumbnail

NEW TECH: Votiro takes ‘white-listing’ approach to defusing weaponized documents

The Last Watchdog

A lot of business today rely on using these basic tools on a daily basis, for HR to review resumes, to process insurance claims, to open up financial tables, all those kinds of things,” Grafi noted. Employees today receive mixed messages. This then drops a PowerShell script into the memory of the host computer.