Hunton Privacy

OCTOBER 24, 2022

On October 18, 2022, the New York State Department of Financial Services (“NYDFS”) announced that EyeMed Vision Care LLC (“EyeMed”) agreed to a $4.5 On October 18, 2022, the New York State Department of Financial Services (“NYDFS”) announced that EyeMed Vision Care LLC (“EyeMed”) agreed to a $4.5

Cybersecurity 67

Cybersecurity Financial Services Risk Phishing 67

Hunton Privacy

SEPTEMBER 1, 2021

34-92806 ; and In the Matter of KMS Financial Services, Inc. , Release No. found that between January 2018 and July 2021, unauthorized third parties accessed the cloud-based email accounts of over 120 Cambridge representatives, leading to the exposure of personally identifiable information of over 2,100 clients.

Cybersecurity 113

Cybersecurity Financial Services Cloud Access 113

Schneier on Security

JANUARY 31, 2024

The rules would ensure people can obtain their own financial data at no cost, control who it’s shared with and choose who they do business with in the financial industry. The best way for financial services firms to meet the CFPB’s rules would be to apply the decoupling principle broadly.

Financial Services 97

Financial Services Privacy Personal data Marketing 97

IBM Big Data Hub

AUGUST 1, 2023

With IBM Cloud for Financial Services , a first-of-its-kind cloud with built-in controls informed by the industry, we are working to help clients on their missions to mitigate this risk, positioning financial services and other regulated industries to host applications and workloads in the cloud in a secured environment.

Financial Services 63

Financial Services Computer and Electronics Cloud Digital transformation 63

Data Protection Report

APRIL 22, 2021

On April 14, 2021, the New York Department of Financial Services (NYDFS) announced a $3 million settlement with insurance company National Securities Corp. Readers may recall that NYDFS’ cybersecurity regulation went into effect in March of 2017. A threat actor gained access to an employee’s document management system account.

Cybersecurity 94

Cybersecurity Financial Services Phishing Compliance 94

Krebs on Security

JANUARY 25, 2022

“We believe the outsider may have had an opportunity to access the accounts of certain customers, including your account, at which point they would be able to view personal information pertaining to that customer and potentially obtain an unauthorized loan using the customer’s credentials,” MSF said. .

Financial Services 225

Financial Services IT Data breaches Passwords 225

The Last Watchdog

SEPTEMBER 7, 2022

Healthcare and public health, financial services, and IT organizations are frequent targets, although businesses of all sizes can fall victim to these schemes. The inability to run the business effectively or access crucial data for days, weeks, or even months can result in lost revenue, customers, and opportunity.

Ransomware 124

Ransomware Education Phishing Financial Services 124

Data Protection Report

JUNE 2, 2021

On May 13, 2021, the New York Department of Financial Services (NYDFS) announced a $1.8 Readers may recall that NYDFS’ cybersecurity regulation went into effect in March of 2017. Readers may recall that NYDFS’ cybersecurity regulation went into effect in March of 2017. NYDFS Cybersecurity Regulation. The Consent Order.

Cybersecurity 71

Cybersecurity Insurance Financial Services Phishing 71

Security Affairs

JANUARY 18, 2019

The bug affected the OCA’s Diameter Signalling Router component and its Communications Services Gatekeeper. The flaw also affected the Financial Services Analytical Applications Infrastructure, the Fusion Middleware MapViewer, and four three Oracle Retail components. ” reads the d escription provided by.

Financial Services 68

Financial Services Libraries Mining Retail 68

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July. billion per month.

Insurance 86

Insurance Data breaches Financial Services Passwords 86

The Last Watchdog

JANUARY 30, 2019

million patients when hackers gained unauthorized access to databases operated by a third-party billing vendor. One might assume top-tier financial services firms and healthcare vendors would have solved third-party cyber exposures by now. Late last year, Atrium Health disclosed it lost sensitive data for some 2.65

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Thales Cloud Protection & Licensing

NOVEMBER 27, 2018

The cybersecurity regulation ( 23 NYCRR 500 ) adopted by the New York State Department of Financial Services (NYDFS) is nearly two years old. The 2017 bill, the first of its kind, will be fully implemented as of March 1st, 2019. Even though these regulations only apply to New York, financial institutions across the U.S.

Cybersecurity 71

Cybersecurity Financial Services Encryption Data Privacy 71

Security Affairs

SEPTEMBER 29, 2022

The experts were able to enumerate the C2s and targets of multiple distinct Chaos clusters, some of which were employed in recent DDoS attacks against the gaming, financial services and technology, and media and entertainment industries. .” reads the analysis published by Lumen Technologies. ” continues the report. .

Mining 86

Mining Financial Services IT Security 86

HL Chronicle of Data Protection

FEBRUARY 25, 2020

Companies should take note of two imminent developments in New York in the area of cybersecurity regulation: enforcement of the New York Department of Financial Services (NYDFS) Cybersecurity Regulation (Regulation) and the effective date of the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act or Act).

Cybersecurity 104

Cybersecurity Financial Services Data breaches Insurance 104

The Last Watchdog

DECEMBER 6, 2018

In the same vein, businesses at large can use the intelligence cycle as a model to detect and deter any attacks coming from foreign intelligence services. Per a 2017 CNN source , nearly 100,000 agents from as many as 80 nations operate within the United States with the intention of targeting businesses to gain access to key U.S.

Security 149

Security Financial Services Manufacturing Data collection 149

Data Matters

JUNE 24, 2021

In September 2017, then-SEC Chairman Jay Clayton issued a public statement that provided an overview of the SEC’s approach to cybersecurity and underscored it as a priority for the SEC. 20, 2017). Companies should regularly assess compliance with current policies and procedures to confirm the effectiveness as adequate controls.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Security Affairs

JANUARY 13, 2019

The ServHelper is a backdoor, experts analyzed two variants of it, while FlawedGrace is a remote access trojan (RAT). FlawedGrace is a full-featured RAT that we first observed in November 2017.” ServHelper has two variants: one focused on remote desktop functions and a second that primarily functions as a downloader.”

IT 91

IT Financial Services Retail Ransomware 91

The Last Watchdog

APRIL 3, 2019

I had the chance at RSA 2019 to visit with Mike Kiser, global strategist at SailPoint , an Austin, TX-based supplier of IGA services to discuss this. SailPoint, which went public in November 2017, has grown to more than 1000 employees in 30 locations. Users re-defined. Compliance matters. Public trust must be maintained.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

Hunton Privacy

JULY 24, 2020

On Wednesday, July 22, the New York Department of Financial Services (the “NYDFS”) announced that it had filed administrative charges against First American Title Insurance Co. under the NYDFS Cybersecurity Regulation , marking the agency’s first enforcement action since the rules went into effect in March 2017.

Cybersecurity 85

Cybersecurity Financial Services Risk Insurance 85

eSecurity Planet

FEBRUARY 11, 2022

Some organizations such as financial services firms and healthcare organizations, have regulatory concerns in addition to business concerns that need to be addressed in a cybersecurity risk management system. The only way to make a system 100 percent secure is to make sure it isn’t accessible by anyone, which is impractical at best.

Risk 145

Risk Cybersecurity Encryption Access 145

Krebs on Security

AUGUST 22, 2018

A redacted “statement of facts” in the case obtained by KrebsOnSecurity says records obtained from Google revealed that a cellular device used by Ortiz to commit SIM swaps had at one point been used to access the Google account identified as Xzavyer.Narvaez@gmail.com. ” “The specific tower is located approximately 0.6

Blockchain 137

Blockchain Retail Financial Services Access 137

HL Chronicle of Data Protection

OCTOBER 4, 2018

Covered Entities must implement risk-based policies, procedures and controls designed to monitor the activity of authorized users and detect their unauthorized access or use of, or tampering with, nonpublic information. Monitoring of Authorized Users (Section 500.14(a)). Encryption of Nonpublic Information (Section 500.15).

Cybersecurity 65

Cybersecurity Encryption Financial Services Compliance 65

Hunton Privacy

JANUARY 3, 2017

On December 28, 2016, the New York State Department of Financial Services (“DFS”) announced an updated version of its cybersecurity regulation for financial institutions (the “Updated Regulation”). The Updated Regulation will become effective on March 1, 2017.

Cybersecurity 40

Cybersecurity Financial Services Authentication Information Security 40

IT Governance

JANUARY 10, 2018

In December 2017 we reported that 33.8 million records had been leaked, and in November 2017 there were 59 million records leaked. According to a recent study from Invotra , the financial services industry and the public sector both fear sophisticated, harmful cyber threats in 2018.

Customer Experience 84

Customer Experience Financial Services GDPR Phishing 84

Security Affairs

FEBRUARY 4, 2019

Some of our clients in the banking industry or other financial services; they see more and more SS7-based [requests],” Karsten Nohl, a researcher from Security Research Labs who has worked on SS7 for years, told Motherboard in a phone call. . “Nohl pointed to how hackers could target someone who already has SS7 access.

IT 99

IT Authentication Financial Services Access 99

eSecurity Planet

SEPTEMBER 10, 2021

What measures does the provider have in place to protect various access components? Which roles or individuals from the provider have access to the data stored in the cloud? Deploy an identity and access management solution. What level of technical support is the provider willing to provide? Train your staff.

Cloud 132

Cloud Security Encryption Risk 132

Security Affairs

JANUARY 4, 2021

defense contractors , financial services firms, and a national data center in Central Asia. Other malware found on infected computers includes the PlugX remote access trojan, regularly mentioned in cybersecurity reports about campaigns linked to China. They also uncovered the ASPXSpy webshell. ” concludes the report.

Ransomware 122

Ransomware Encryption Financial Services Cybersecurity 122

Data Matters

NOVEMBER 13, 2017

18, 2017, the Consumer Financial Protection Bureau (CFPB) released a set of consumer protection principles (Principles) designed to protect consumer interests in the market for services built around consumer-approved use of financial information.

Financial Services 60

Financial Services Privacy Access Marketing 60

HL Chronicle of Data Protection

OCTOBER 4, 2018

Covered Entities must implement risk-based policies, procedures and controls designed to monitor the activity of authorized users and detect their unauthorized access or use of, or tampering with, nonpublic information. Monitoring of Authorized Users (Section 500.14(a)). Encryption of Nonpublic Information (Section 500.15).

Cybersecurity 40

Cybersecurity Encryption Financial Services Compliance 40

HL Chronicle of Data Protection

OCTOBER 4, 2018

Covered Entities must implement risk-based policies, procedures and controls designed to monitor the activity of authorized users and detect their unauthorized access or use of, or tampering with, nonpublic information. Monitoring of Authorized Users (Section 500.14(a)). Encryption of Nonpublic Information (Section 500.15).

Cybersecurity 40

Cybersecurity Encryption Financial Services Compliance 40

CGI

JANUARY 6, 2018

However, CGI’s 2017 Global Financial Consumer Survey results reveal the ongoing need for banks to remain vigilant in keeping pace with evolving consumer expectations. In 2017, we surveyed 2,250 consumers across the U.S., For FinTechs , it’s clear that getting access to customers remains a big challenge.

Financial Services 40

Financial Services Risk Marketing Access 40

Data Protection Report

JANUARY 7, 2019

The two-year transitional period under the New York State Department of Financial Services (“DFS””) Cybersecurity Regulation , 23 NYCRR 500 (the “Regulation”), will expire on March 1, 2019, with the final remaining requirement becoming effective. Third-party service provider risk management program.

Cybersecurity 40

Cybersecurity Compliance Financial Services Risk 40

The Last Watchdog

NOVEMBER 13, 2018

billion data records were compromised worldwide in the first half of 2018 – a 72 percent rise in the number of lost, stolen or compromised records reported in the first six months of 2017. Vulnerable online apps and services factored in as a primary target of automated botnet attacks. According to Gemalto’s Breach Level Index , 3.3

Security 140

Security Digital transformation B2C B2B 140

Data Matters

JANUARY 25, 2018

In the aftermath of a significant data security incident, a best practice is to hire a third-party forensic firm, working at the direction of counsel, to review how the breach occurred, what data may have been accessed, whether the incident has ceased and other important issues directly relevant to legal counsel’s review. In Leibovic v.

Data breaches 60

Data breaches Communications Financial Services Privacy 60

IT Governance

NOVEMBER 9, 2018

In addition to data subjects’ rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability and to object, the EU’s GDPR (General Data Protection Regulation) sets out requirements relating to automated individual decision-making, including profiling. Such decision-making is now restricted.

GDPR 88

GDPR Personal data Financial Services Compliance 88

ARMA International

AUGUST 2, 2019

with Equifax in connection with a 2017 data breach that exposed sensitive, personal data of around 147 million people. See FTC press release Equifax to Pay $575 Million as Part of Settlement with FTC, CFPB, and States Related to 2017 Data Breach , July 22, 2019.). Equifax agreed to pay between $575 million and $700 million in total.

Cloud 41

Cloud Data breaches Encryption Access 41

Security Affairs

FEBRUARY 4, 2019

Some of our clients in the banking industry or other financial services; they see more and more SS7-based [requests],” Karsten Nohl, a researcher from Security Research Labs who has worked on SS7 for years, told Motherboard in a phone call. . “Nohl pointed to how hackers could target someone who already has SS7 access.

IT 46

IT Authentication Financial Services Access 46