Krebs on Security

JUNE 1, 2023

ru , a cost-per-acquisition (CPA) program launched in 2012 that paid handsomely for completed application forms tied to a variety of financial instruments, including consumer credit cards, insurance policies, and loans.

Healthcare 228

Healthcare Passwords Sales Ransomware 228

Hunton Privacy

FEBRUARY 5, 2018

million to settle claims brought under Health Insurance Portability and Accountability Act rules, alleging that lax security practices led to five breaches of electronic protected health information. Fresenius will pay OCR $3.5

Insurance 48

Insurance Risk Encryption Access 48

Hunton Privacy

JANUARY 16, 2021

The Court held that OCR’s civil monetary penalty for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule and HIPAA Security Rule was “arbitrary, capricious, and otherwise unlawful.”.

Encryption 71

Encryption Privacy Insurance Security 71

Hunton Privacy

JANUARY 26, 2012

The Commissioner made clear his desire to operate transparently, and by explicitly stating his priorities indicated that we can expect to see increased enforcement action in these fields in 2012. Within the sphere of credit and finance, the Commissioner is widely considered to be focusing particular attention on the insurance industry.

FOIA 40

FOIA Insurance Big data Data breaches 40

eDiscovery Daily

FEBRUARY 3, 2022

Lee: FFS, an insurance broker, requested the production of all written communication after the defendants violated their contract by sharing company information after termination. 3] Zac Muir, “Failure to Produce Text Messages in eDiscovery,” Microfocus, October 16, 2012. [4] 4] Anthony J.

e-Discovery 78

e-Discovery Computer and Electronics Communications Authentication 78

Hunton Privacy

AUGUST 24, 2012

On July 31, 2012, Minnesota Attorney General Lori Swanson announced a $2.5 Accretive”) for violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations, and various Minnesota debt collection and consumer protection laws. million settlement with Accretive Health, Inc.

Insurance 40

Insurance IT Privacy Security 40

Hunton Privacy

AUGUST 24, 2015

As we previously reported , the case stems from Wyndham’s challenge to the FTC’s authority to bring a 2012 suit against Wyndham, in which the FTC alleged that the company’s failure to maintain reasonable security contributed to three separate data breaches involving hackers accessing sensitive consumer data.

Security 56

Security Insurance Data breaches Access 56

Hunton Privacy

MAY 21, 2012

On May 4, 2012, Marty Abrams, President of the Centre for Information Policy Leadership at Hunton & Williams LLP (“the Centre”), interviewed British Columbia’s Information and Privacy Commissioner Elizabeth Denham during the Centre’s First Friday call. Listen to the full audio recording of the interview with Commissioner Denham.

Privacy 40

Privacy Insurance Compliance Government 40

Hunton Privacy

SEPTEMBER 4, 2012

On August 23, 2012, the United States Court of Appeals for the Sixth Circuit held in R etailer Ventures, Inc. collectively, the “policyholders”) sought coverage for the losses under a commercial crime policy issued by National Union Fire Insurance Company of Pittsburgh, Pa. Nat’l Union Fire Ins. Retail Ventures, Inc., National Union”).

Data breaches 40

Data breaches Insurance Retail Communications 40

Hunton Privacy

MARCH 19, 2014

In a notice published in the Federal Register, OCR stated that the survey will collect information such as “number of patient visits or insured lives, use of electronic information, revenue, and business locations” to assess the organizations’ “size, complexity and fitness” for an audit. HHS conducted an audit of 115 covered entities in 2012.

Compliance 40

Compliance Insurance Privacy Risk 40

Hunton Privacy

JULY 11, 2011

The law, which will become effective on September 1, 2012, incorporates the expanded definition of the term “covered entity” in Texas’s existing health privacy law and could have a broad impact on many non-HIPAA covered entities.

Privacy 45

Privacy Insurance Compliance Access 45

Hunton Privacy

JANUARY 3, 2014

On July 31, 2012, Accretive settled a federal lawsuit with the Minnesota Attorney General for $2.5 million for violations of the Health Insurance Portability and Accountability Act of 1996 and various Minnesota debt collection and consumer protection laws relating to the same incident.

Insurance 40

Insurance Information Security Risk Access 40

Hunton Privacy

JUNE 7, 2012

On May 24, 2012, Massachusetts Attorney General Martha Coakley announced that South Shore Hospital agreed to a consent judgment and $750,000 payment to settle a lawsuit stemming from a data breach that occurred in February 2010.

Data breaches 40

Data breaches Privacy Insurance Education 40

Hunton Privacy

MAY 9, 2013

As part of the test-shopping operation, FTC staff members posing as individuals or representatives of companies contacted 45 data broker companies seeking information about consumers to make decisions related to creditworthiness, eligibility for insurance and suitability for employment.

Insurance 40

Insurance Privacy Personal data IT 40

Hunton Privacy

DECEMBER 9, 2015

As we previously reported on June 26, 2012, the FTC announced that it filed suit against Wyndham and three of its subsidiaries, alleging that the company posted misleading representations on Wyndham websites regarding how the company safeguarded customer information. The case is FTC v. Wyndham Worldwide Corporation, et al. (2:13-CV-01887-ES-JAD)

Data breaches 49

Data breaches Information Security Insurance Compliance 49

Hunton Privacy

MARCH 5, 2015

As we previously reported , on June 26, 2012, the FTC announced that it had filed suit against Wyndham and three of its subsidiaries alleging that the company posted misleading representations on Wyndham websites regarding how the company safeguarded customer information. Wyndham Worldwide Corp.

Insurance 40

Insurance Data breaches Security Access 40

DLA Piper Privacy Matters

APRIL 8, 2019

The Act is a welcome change to the old regime where national provisions concerning the subject matter have been scattered into different regulations, namely the Patient’s Rights Act (1992/785), Act on Electronic Processing of Social and Health Care Customer Data (2007/159), Bio Bank Act (2012/688) and Medicines Act (1987/395).

Personal data 68

Personal data GDPR Healthcare Compliance 68

eDiscovery Daily

JANUARY 9, 2019

Merryday sustained the defendant’s objection to an order requiring the defendant to produce all documentation related to do-not-call requests received between September 2012 and June 2013 and also required the plaintiff to move for class certification by April 13. Farmers Insurance Exchange , Missouri District Judge Rodney W.

e-Discovery 48

e-Discovery Metadata Insurance Privacy 48

Hunton Privacy

JANUARY 13, 2016

The FTC asserted that, in 2012, the Dentrix G5 software incorporated a third party database engine that included a form of data protection that Schein advertised as “encryption.” Dentrix G5 is a type of software that enables dentists to perform office tasks such as entering patient data and sending appointment reminders.

Encryption 40

Encryption Insurance Data breaches Privacy 40

Hunton Privacy

MARCH 22, 2016

In 2012, Accretive entered into a $2.5 million settlement with the Minnesota Attorney General for violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations, and various Minnesota debt collection and consumer protection laws.

Computer and Electronics 40

Computer and Electronics Risk Passwords Privacy 40

Hunton Privacy

JULY 8, 2013

On June 28, 2013, the Swiss Federal Data Protection and Information Commissioner (“FDPIC”) issued its 20th annual Report of Activities (the “Report”), highlighting the FDPIC’s main activities during the period from April 2012 to March 2013. Health Insurance Providers.

IT 40

IT Personal data Insurance Analytics 40

DLA Piper Privacy Matters

DECEMBER 7, 2017

The group claims that between June 2011 and February 2012 Google obtained personal information by bypassing the default privacy settings on the iPhone to install cookies in the Safari web browser. On 30 November a campaign group called “Google You Owe Us” announced that it intended to raise a group claim against Google.

Risk 40

Risk Privacy GDPR Data breaches 40

Hunton Privacy

JANUARY 24, 2012

On January 19, 2012, Minnesota Attorney General Lori Swanson announced a lawsuit against Accretive Health, Inc., (“Accretive”) for violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations, the Minnesota Health Records Act, Minnesota’s debt collection statutes and Minnesota’s consumer protection (..)

Privacy 42

Privacy Insurance Information Security Risk 42

Hunton Privacy

DECEMBER 6, 2012

On December 5, 2012, the Federal Trade Commission announced that the online advertising company Epic Marketplace, Inc. Many of these websites were related to sensitive medical and financial topics, such as fertility issues, impotence, menopause, incontinence, disability insurance, credit repair, debt relief and personal bankruptcy.

Insurance 40

Insurance Privacy Data collection IT 40

Hunton Privacy

JUNE 14, 2012

On June 7, 2012, the Federal Trade Commission announced settlement agreements with two businesses that allegedly exposed customers’ sensitive personal information by allowing peer-to-peer (“P2P”) file-sharing software to be installed on their company computers and networks.

Data breaches 40

Data breaches Privacy Insurance Sales 40

Hunton Privacy

JANUARY 16, 2013

The Companies published disclaimers that the criminal background checks were not to be used to screen individuals for insurance, employment or credit and that the companies did not comply with the FCRA, but the FTC pointed out that those disclaimers were essentially meaningless.

Insurance 40

Insurance Compliance Marketing IT 40

HL Chronicle of Data Protection

MAY 3, 2018

“European data protection rules will become a trademark people recognise and trust worldwide” That is how, in January 2012, Viviane Reding – then Vice-President of the European Commission and EU Justice Commissioner – ended her announcement of the widest reform of privacy and data protection law ever attempted.

GDPR 40

GDPR Privacy Personal data Insurance 40

Data Matters

MAY 9, 2019

The National Association of Insurance Commissioners (NAIC) held its Spring 2019 National Meeting (Spring Meeting) in Orlando, Florida, from April 6 to 9, 2019. ceding insurer could be eligible for the same reduced collateral requirements that would apply to qualifying EU reinsurers under the revised CFR Model Laws.

Insurance 68

Insurance Blockchain Big data Risk 68

eSecurity Planet

AUGUST 27, 2021

Started in 2012, UpGuard offers a cyber resilience platform to help manage IT business risks. CSTAR scores have the added functionality for use as evidence for cybersecurity insurance. ServiceNow’s highest reviews and ratings cited remediation and exception management, standard API integration, and contract efficiency.

Risk 130

Risk Compliance Marketing Cybersecurity 130

eDiscovery Daily

AUGUST 6, 2018

Noting that the “burden is on the party resisting discovery to show why a discovery request should be denied by specifying in detail, as opposed to general and boilerplate objections, why ‘each request is irrelevant’” , Judge Koppe ruled on each of the following sources of ESI requested by the defendant: Copies of any and all documents related to the (..)

Privacy 31

Privacy Communications Insurance Education 31

Hunton Privacy

MARCH 2, 2015

With respect to federal preemption, the Act does not modify, limit or supersede the privacy or security provisions of federal laws, including the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act of 1996. As we reported on February 23, 2012, the White House released a report outlining a framework for U.S.

Privacy 40

Privacy Personal data Risk Insurance 40

IT Governance

JUNE 1, 2021

Doncaster-based One Call Insurance hit by ransomware (unknown) Ransomware attack on Swiss Cloud Computing AG (6,500) Wolfe Eye Clinic victim of Lorenz threat actors (unknown) One of the US’s largest pipelines shuts down to contain cyber security breach (unknown) J. Find out more. Ransomware. Malicious insiders and miscellaneous incidents.

Data breaches 124

Data breaches Ransomware Insurance Energy and Utilities 124

Data Matters

JUNE 9, 2021

The Notice further states that the data will never be shared with marketing or insurance companies. Once collected, the data will be combined to create a single, national data lake.

Healthcare 79

Healthcare Data collection Personal data GDPR 79

Robert's Db2

NOVEMBER 2, 2011

I had a great time last week, and I'm already looking forward to IOD 2012 -- hope to see you there. I expect that as time goes by, organizations will come up with new and innovative ways to derive value from the system time and business time capabilities of DB2 10.

Insurance 48

Insurance IT Access 48

eDiscovery Daily

JANUARY 9, 2018

Here are three cases related to privilege issues, including one where the court granted a quick peek request by the plaintiff, citing the “court’s heavy caseload and limited resources”: Putting Information on File Share Site without Protection Waives Privilege, Court Rules : In Harleysville Insurance Co. Holding Funeral Home, Inc.

e-Discovery 39

e-Discovery Computer and Electronics Communications Cloud 39

John Battelle's Searchblog

JANUARY 25, 2019

So what insures engagement and attention? It’s mostly gone now, but there was a time, from about 1994 to 2012, when the Internet ran on a different architecture, one based on the idea that the intelligence should reside in the nodes – the site – not at the center. (Don’t get me started about Apple being different. Architecture.

Government 92

Government IT Marketing ROT 92

IBM Big Data Hub

JULY 6, 2023

These new reporting standards represent an evolution from the voluntary guidelines first issued in 2009 by India’s Ministry of Corporate Affairs, which were further refined in the Business Responsibility Report (BRR) of 2012. Businesses should respect and promote the well-being of all employees, including those in their value chains.

Insurance 51

Insurance Government Data structuring Communications 51