Hunton Privacy

OCTOBER 15, 2013

On October 7, 2013, the United States District Court for the Central District of California held that a general liability insurance policy covered data breach claims alleging violations of California patients’ right to medical privacy. Hartford Casualty Insurance Co. Corcino & Associates , CV 13-03728-GAF (C.D.

Insurance 40

Insurance Data breaches Privacy Security 40

Hunton Privacy

JULY 16, 2021

According to the Regulators, the Proposed Guidance largely would adopt the text of the OCC’s 2013 guidance, broadening its scope to include organizations supervised by all three Regulators.

Risk 81

Risk Insurance Sales Encryption 81

Hunton Privacy

FEBRUARY 24, 2014

Securities and Exchange Commission that its health insurance subsidiary, Triple-S Salud, Inc. Triple S”), which is Puerto Rico’s largest health insurer, will be fined $6.8 million for a data breach that occurred in September 2013. Triple-S Management Corporation reported in the 8-K it recently filed with the U.S.

Insurance 40

Insurance Data breaches IT Security 40

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Hunton Privacy

FEBRUARY 22, 2017

The settlement stemmed from the theft of two laptops stolen from Horizon headquarters in November 2013, when personnel from outside vendors performing renovations and moving services at Horizon’s Newark headquarters had unsupervised access to the area where company laptops were stored. Under the terms of the settlement, in addition to the $1.1

Insurance 45

Insurance Privacy Encryption Passwords 45

Hunton Privacy

JUNE 13, 2023

On June 6, 2023, the Federal Deposit Insurance Corporation (“FDIC”), the Board of Governors of the Federal Reserve System (“FRB”) and the Office of the Comptroller of the Currency (“OCC”) issued their final Interagency Guidance on Third-Party Relationships (“Guidance”).

Risk 64

Risk Insurance Compliance Information Security 64

Security Affairs

JULY 9, 2019

The security breach was discovered earlier this year, hackers also accessed data stored in the Literacy Works Information System and a legacy unemployment insurance service database. Exposed data includes first names, last names, social security numbers, dates of birth, city or county of residence, graduation dates and record numbers.

Data breaches 78

Data breaches Insurance Access Security 78

Hunton Privacy

JANUARY 16, 2021

The Court held that OCR’s civil monetary penalty for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule and HIPAA Security Rule was “arbitrary, capricious, and otherwise unlawful.”. OCR investigated and imposed the $4.3

Encryption 71

Encryption Privacy Insurance Security 71

IG Guru

NOVEMBER 26, 2019

Department of Health and Human Services (HHS) has imposed a $1,600,000 civil money penalty against the Texas Health and Human Services Commission (TX HHSC), for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules between 2013 […]. The post OCR Imposes a $1.6

Insurance 52

Insurance Privacy Security Records Management 52

Hunton Privacy

FEBRUARY 3, 2017

million civil monetary penalty against Children’s Medical Center of Dallas (“Children’s”) for alleged ongoing violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules, following two consecutive breaches of patient electronic protected health information (“ePHI”).

Privacy 40

Privacy Security Insurance Encryption 40

Krebs on Security

NOVEMBER 3, 2022

In 2013, Kurittu worked on investigation involving Kivimaki’s use of the Zbot botnet, among other activities Kivimaki engaged in as a member of the hacker group Hack the Planet. Among those who grabbed a copy of the database was Antti Kurittu , a former criminal investigator at the Helsinki Police Department.

Data breaches 187

Data breaches Records Management Insurance Archiving 187

Krebs on Security

SEPTEMBER 25, 2020

Mr. Davies was charged with murder and fraud after he attempted to collect GBP 132,000 in her life insurance payout, but British prosecutors ultimately conceded they did not have enough evidence to convict him. A search on John Clifton Davies and Iryna turned up this 2013 story from The Daily Mirror which says Iryna is John C.

Insurance 194

Insurance IT 194

HL Chronicle of Data Protection

SEPTEMBER 27, 2018

to support individual and classwide actions for purported data security and privacy violations. 4th 390, 393 (2013) (allowing “unlawful” UCL claim for violations of the federal Truth in Savings Act despite no express private right of action because Congress intended for state laws to hold banks to equivalent standards); see also Zhang v.

Privacy 81

Privacy Data breaches Insurance IT 81

The Security Ledger

APRIL 27, 2021

The post Episode 212: China’s Stolen Data Economy (And Why We Should Care) appeared first on The Security Ledger with Paul F. Back in 2013, news that hackers stole data on tens of millions of customers of the software maker Adobe dominated the headlines for days. Read the whole entry. » Waiting for Federal Data Privacy Reform?

Data breaches 52

Data breaches Big data Retail Insurance 52

Hunton Privacy

AUGUST 1, 2013

On April 19, 2013, the North Dakota legislature amended the state’s breach notification law (Section 51-30-01 of the North Dakota Century Code) to expand the definition of “personal information” to include “health insurance information” and “medical information.” The amendments took effect on August 1, 2013.

Insurance 40

Insurance Security Privacy 40

Krebs on Security

JUNE 30, 2021

Ronnie Tokazowski is a threat researcher at Agari , a security firm that has closely tracked many of the groups behind these advanced fee schemes [KrebsOnSecurity interviewed Tokazowski in 2018 after he received a security industry award for his work in this area]. ” ANY METHOD THAT WORKS. Image: Agari.

Insurance 230

Insurance Education IT Government 230

Hunton Privacy

AUGUST 10, 2017

Circuit reversed the dismissal of a putative data breach class action against health insurer CareFirst, Attias v. The court found that the complaint did in fact allege the theft of Social Security numbers and payment card information. On August 1, 2017, a unanimous three-judge panel for the D.C. CareFirst, Inc. , 16-7108, slip op.

Insurance 40

Insurance Data breaches Risk Access 40

Hunton Privacy

JANUARY 17, 2013

The Final Rule will become effective March 26, 2013, with covered entities and business associates obligated to comply with the new requirements by September 23, 2013. The Final Rule comes two and a half years after the proposed rule was published in July 2010.

Privacy 40

Privacy Security Insurance Marketing 40

Hunton Privacy

FEBRUARY 6, 2015

On February 3, 2015, the Securities and Exchange Commission (“SEC”) released a Risk Alert , entitled Cybersecurity Examination Sweep Summary, summarizing observations from the recent round of cybersecurity examinations of registered broker-dealers and investment advisers under the Cybersecurity Examination Initiative.

Cybersecurity 40

Cybersecurity Insurance Financial Services Risk 40

Hunton Privacy

JULY 12, 2013

On July 11, 2013, the Department of Health and Human Services (“HHS”) announced a resolution agreement and $1.7 following a security breach that affected over 600,000 individuals. million settlement with WellPoint Inc. In a not-so-subtle hint of OCR’s future intentions, the press release also mentioned that “Beginning Sept.

Privacy 40

Privacy Security Insurance Access 40

Hunton Privacy

DECEMBER 3, 2018

Each Referential lists the purposes of the data processing in question, the legal basis for that data processing, the types of personal data that may be processed for those purposes, the data retention periods and the associated security measures.

GDPR 81

GDPR Personal data Insurance Education 81

Hunton Privacy

NOVEMBER 30, 2016

On November 22, 2016, the Department of Health and Human Services (“HHS”) announced a $650,000 settlement with University of Massachusetts Amherst (“UMass”), resulting from alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules. .

Computer and Electronics 40

Computer and Electronics Insurance Privacy Risk 40

ARMA International

APRIL 28, 2022

I have been a member of the OAR staff at the ANO since March 2013. The plan was to meet the insurance coordinator at the Howard Avenue office at 8:30 a.m. I was aware that I would need documentation on damage and losses for insurance and internal purposes. The insurance coordinator proposed stabilizing in place.

Records Management 97

Records Management Archiving Insurance Communications 97

Hunton Privacy

AUGUST 7, 2013

On August 6, 2013, the Obama Administration posted links on The White House Blog to reports from the Departments of Commerce , Homeland Security and Treasury containing recommendations on incentivizing companies to align their cybersecurity practices with the Cybersecurity Framework.

Cybersecurity 40

Cybersecurity Insurance Risk Security 40

Hunton Privacy

SEPTEMBER 23, 2013

Today, September 23, 2013, marks the deadline for compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Omnibus Rule that was issued in January 2013. Change the notice of privacy practices to be distributed to individuals.

Compliance 40

Compliance Privacy Insurance Risk 40

HL Chronicle of Data Protection

SEPTEMBER 27, 2018

to support individual and classwide actions for purported data security and privacy violations. 4th 390, 393 (2013) (allowing “unlawful” UCL claim for violations of the federal Truth in Savings Act despite no express private right of action because Congress intended for state laws to hold banks to equivalent standards); see also Zhang v.

Privacy 40

Privacy Data breaches Insurance IT 40

HL Chronicle of Data Protection

SEPTEMBER 27, 2018

to support individual and classwide actions for purported data security and privacy violations. 4th 390, 393 (2013) (allowing “unlawful” UCL claim for violations of the federal Truth in Savings Act despite no express private right of action because Congress intended for state laws to hold banks to equivalent standards); see also Zhang v.

Privacy 40

Privacy Data breaches Insurance IT 40

eSecurity Planet

FEBRUARY 16, 2021

The internet is fraught with peril these days, but nothing strikes more fear into users and IT security pros than the threat of ransomware. Raising awareness about ransomware is a baseline security measure. As training sessions have little influence over staff for every potential attack, it makes added security more imperative.

Ransomware 97

Ransomware Encryption Insurance Cloud 97

CGI

JANUARY 22, 2016

This blog focuses on the new Network and Information Security Directive (NISD) which was agreed at the same time and also has significant implications for business. The likely implications will be: Organisations will need to be able to demonstrate that they have taken ‘appropriate security measures’.

Insurance 40

Insurance GDPR Personal data Marketing 40

Hunton Privacy

APRIL 3, 2013

On January 17, 2013, the U.S. Department of Health and Human Services issued a final omnibus rule modifying prior regulations enacted pursuant to the Health Insurance Portability and Accountability Act of 1996. Sotto , partner and head of the Global Privacy and Data Security practice at Hunton & Williams LLP, and Ryan P.

Compliance 40

Compliance Insurance Privacy Security 40

IT Governance

MAY 29, 2018

Insurance startup leaks sensitive customer health data. LifeBridge Health and LifeBridge Potomac Professionals Notify Patients of a Recent Security Incident. UT alerts some faculty, students of lost flash drive containing Social Security numbers. Bombas notifies consumers of breach going back to 2013. Hacker Steals $1.35

Data breaches 89

Data breaches GDPR Ransomware Passwords 89

Hunton Privacy

MARCH 15, 2013

On March 5, 2013, the German Federal Ministry of the Interior published proposed amendments (in German) to the German Federal Office for Information Security Law.

Cybersecurity 40

Cybersecurity Information Security Insurance Privacy 40

Hunton Privacy

JANUARY 3, 2014

On December 31, 2013, the Federal Trade Commission announced that Accretive Health, Inc. Accretive”) has agreed to settle charges that the company’s inadequate data security measures unfairly exposed sensitive consumer information to the risk of theft or misuse.

Insurance 40

Insurance Information Security Risk Access 40

Hunton Privacy

DECEMBER 16, 2014

The event focused on several new references to “risk” in the 2013 revised OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data in time for the main 2016 Ministerial meeting.

Privacy 40

Privacy Risk Security Insurance 40

Hunton Privacy

OCTOBER 9, 2013

On October 2, 2013, the 86th Conference of the German Data Protection Commissioners concluded in Bremen. securing electronic communications by implementing and developing end-to-end encryption. Resolution on the Need for Action in the Area of Public Security. The previous Conference was held in Bremerhaven in March 2013.

Computer and Electronics 40

Computer and Electronics Encryption Communications Insurance 40

Krebs on Security

AUGUST 6, 2020

A group of thieves thought to be responsible for collecting millions in fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts gathered personal data on people and businesses they were impersonating by leveraging several compromised accounts at a little-known U.S. info and findget[.]me,

Insurance 337

Insurance Communications Authentication Access 337

Hunton Privacy

AUGUST 30, 2013

On August 29, 2013, the FTC announced that it had filed a complaint against LabMD, Inc. Specifically, a LabMD spreadsheet that was found on the P2P network contained names, Social Security numbers, dates of birth, health insurance information and medical treatment codes. LabMD”) for failing to protect consumers’ personal data.

Personal data 40

Personal data Insurance Information Security Access 40