Krebs on Security

AUGUST 14, 2020

The “RCM” portion of its name refers to “revenue cycle management,” an industry which tracks profits throughout the life cycle of each patient, including patient registration, insurance and benefit verification, medical treatment documentation, and bill preparation and collection from patients.

Ransomware 359

Ransomware Insurance Phishing IT 359

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July. The experts detected 8.3

Insurance 85

Insurance Data breaches Financial Services Passwords 85

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

Security Affairs

APRIL 29, 2024

.” The FCC’s Enforcement Bureau launched an investigation after Missouri Sheriff Cory Hutcheson misused a “location-finding service” provided by Securus, a communications service provider for correctional facilities, to access the location data of wireless carrier customers without their consent from 2014 to 2017.

Insurance 60

Insurance Communications Access IT 60

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. According to CryptoIns analysts, the crypto assets insurance market is expected to reach $7 billion by 2023. Why do crypto exchanges’ users need insurance?

Insurance 60

Insurance Risk Marketing Cybersecurity 60

The Last Watchdog

APRIL 30, 2019

I had the chance at RSA 2019 to visit with George Wrenn, founder and CEO of CyberSaint Security , a cybersecurity software firm that plays directly in this space. Then you have the folks whose security programs have run out of steam and they’re looking for a way to prove that they’re doing due care,” Wrenn said.

Cybersecurity 143

Cybersecurity Insurance Security Privacy 143

The Security Ledger

AUGUST 20, 2019

We talk to Bruce McDonnell of the East West Institute about how insurers are responding. Related Stories Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware Podcast Episode 117: Insurance Industry Confronts Silent Cyber Risk, Converged Threats NotPetya Horror Story Highlights Need for Holistic Security.

Insurance 40

Insurance Risk Healthcare Manufacturing 40

Hunton Privacy

NOVEMBER 27, 2017

On November 3, 2017, Securityroundtable.org published an article highlighting the vulnerabilities businesses face in a world of e-commerce and interconnectivity, and spotlighted a crisis-planning panel hosted by Hunton & Williams held on November 1. It is now recognized as a basic risk issue by every company.”

Insurance 45

Insurance Privacy Cybersecurity Risk 45

Hunton Privacy

NOVEMBER 8, 2023

The NYDFS, which regulates financial institutions including insurance companies, mortgage brokers and banks, adopted the original Cybersecurity Regulation in 2017.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

Krebs on Security

AUGUST 17, 2023

The international police organization INTERPOL said last week it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. A 16Shop phishing page spoofing Apple and targeting Japanese users. Image: Akamai.com.

Phishing 186

Phishing Passwords Insurance Sales 186

Krebs on Security

DECEMBER 18, 2018

Virtually all companies like to say they take their customers’ privacy and security seriously, make it a top priority, blah blah. That’s because very few of the world’s biggest companies list any security executives in their highest ranks. banks) would have this role in their executive leadership team.

Security 213

Security Marketing Cybersecurity Data breaches 213

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

IT Governance

APRIL 3, 2019

US food giant Mondelez is suing insurance company Zurich American for denying a $100 million (£76 million) claim filed after the NotPetya attack. NotPetya is a Windows-based piece of ransomware that infected organisations across the globe in 2017. Perilous future for cyber insurance. Was NotPetya an act of war?

Insurance 53

Insurance Ransomware Government Paper 53

Krebs on Security

DECEMBER 12, 2018

Is it fair to judge an organization’s information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? the security posture of vendor partners). ENTIRELY, CERTIFIABLY PREVENTABLE.

Security 187

Security Energy and Utilities Risk Data breaches 187

Hunton Privacy

NOVEMBER 13, 2023

On April 22, 2019, HHS began investigating DMS after receiving a breach notification indicating that DMS’ network server was infected by the Gandcrab ransomware in April 2017. DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”).

Ransomware 72

Ransomware Risk Insurance Encryption 72

IT Governance

NOVEMBER 28, 2018

The Cyber Essentials scheme is a world-leading assurance mechanism for organisations of all sizes to help demonstrate that the most critical cyber security controls have been implemented. Secure your organisation with Cyber Essentials. Being Cyber Essentials certified demonstrates your commitment to cyber security.

Security 108

Security Ransomware Government Insurance 108

Hunton Privacy

OCTOBER 15, 2021

The Division of Consumer Affairs alleged that the fertility clinic violated the New Jersey Consumer Fraud Act and the federal Health Insurance Portability and Accountability Act’s (“HIPAA”) Privacy and Security Rules by removing protected health information (“PHI”) safeguards. Neafsey said in a statement regarding the breach.

Data breaches 103

Data breaches Privacy Insurance Information Security 103

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion.

Insurance 89

Insurance Government Cybersecurity Risk 89

Security Affairs

JANUARY 6, 2019

The Dark Overlord hacking group claims to have stolen a huge trove of documents from the British insurance company Hiscox, Hackers stole “hundreds of thousands of documents,” including tens of thousands files related to the 9/11 terrorist attacks. In October 2017, the group broke into the celeb London Bridge Plastic Surgery clinic.

Insurance 111

Insurance Data breaches Sales Government 111

IT Governance

JULY 23, 2019

Equifax has agreed to pay up to $700 million (about £561 million) as part of a settlement with US regulators following its mammoth data breach in 2017. The FTC (Federal Trade Commission) claimed that Equifax hadn’t taken reasonable steps to secure its systems, which led to the records of more than 147 million people being compromised.

Data breaches 66

Data breaches Insurance Cybersecurity Government 66

OpenText Information Management

NOVEMBER 9, 2017

The Equifax breach disclosed in September 2017 validates why Information Security is at the forefront of the mainstream media, once again. Personal details, including social insurance and credit card numbers, may have been leaked from as many as 143 million customers.

Information Security 40

Information Security Cybersecurity Security Insurance 40

IT Governance

OCTOBER 31, 2023

Thousands of drivers have sensitive data exposed to hackers in major IT breach Date of breach: Unclear, but breached documents date back to 2017. Incident details: A security vulnerability in a third party left personal data exposed of thousands of motorists who had their vehicle towed on behalf of the An Garda Síochána.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Data Protection Report

JUNE 2, 2021

million settlement with two related insurance companies, relating to violations of two different requirements of the NYDFS cybersecurity regulation during the period 2018 to 2019. Readers may recall that NYDFS’ cybersecurity regulation went into effect in March of 2017. NYDFS Cybersecurity Regulation.

Cybersecurity 70

Cybersecurity Insurance Financial Services Phishing 70

Hunton Privacy

FEBRUARY 22, 2017

On February 17, 2017, Horizon Blue Cross Blue Shield of New Jersey (“Horizon”) agreed to pay $1.1 The stolen laptops contained policyholder electronic Protected Health Information (“ePHI”), including names, addresses, birth dates, insurance identifications and, in some cases, Social Security numbers and clinical data.

Insurance 45

Insurance Privacy Encryption Passwords 45

The Last Watchdog

APRIL 18, 2019

Related: Data breaches fuel fledgling cyber insurance market. Brinqa, an Austin, TX-based security vendor has come up with a cyber risk management platform designed to help companies take a much more dynamic approach to closing that gap, specifically in the areas of vulnerability management and application security, to start.

Digital transformation 101

Digital transformation Security Risk Cloud 101

Troy Hunt

NOVEMBER 14, 2023

There was just one more interesting data point in that email: i myself am in that dataset and i've been getting 100x more phishing/scam calls, emails, and physical mail Let me end this with a best guess: this feels like the same situation as the massive Master Deeds incident in South Africa in 2017.

Insurance 122

Insurance Data breaches Mining IT 122

Hunton Privacy

AUGUST 28, 2018

As reported on Hunton’s Insurance Recovery blog , the Second Circuit has rejected Chubb subsidiary Federal Ins. s request for reconsideration of the court’s July 6, 2018, decision, confirming that the insurer must cover Medidata’s $4.8 million loss under its computer fraud insurance policy. July 9, 2018, 2nd Cir.

Insurance 45

Insurance Phishing Access IT 45

Krebs on Security

MARCH 3, 2020

Last week, KrebsOnSecurity reported to health insurance provider Blue Shield of California that its Web site was flagged by multiple security products as serving malicious content. How did a browser extension lead to a malicious link being added to the health insurance company Web site?

Insurance 275

Insurance File names Risk Marketing 275

The Last Watchdog

APRIL 3, 2019

SailPoint, which went public in November 2017, has grown to more than 1000 employees in 30 locations. The key security lesson is that an identity gets assigned to each and every RPA, creating fresh attack vectors. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.

Digital transformation 104

Digital transformation Insurance Compliance Healthcare 104

Security Affairs

MAY 9, 2020

A few weeks later, threat actors launched multiple attacks that attempted to exploit the CVE 2017-11882 Office flaw to run a malicious executable. Please vote Security Affairs for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS [link]. “On April 8, 2020, we witnessed the most recent campaign by this actor. .

Government 63

Government Energy and Utilities Insurance Phishing 63

Security Affairs

APRIL 30, 2019

How much cost a security breach? I can tell you that potential damages could be very expensive for companies, for example, the transportation giant Maersk announced in 2017 that it would incur hundreds of millions in U.S. The good news for the investors is that the company has a robust cyber insurance in place with recognized insurers.

Insurance 78

Insurance Ransomware Security IT 78

Hunton Privacy

FEBRUARY 3, 2017

On February 1, 2017, the U.S. This is the third enforcement action taken by OCR in 2017, following the respective actions taken against MAPFRE Life Insurance of Puerto Rico and Presence Health earlier in January. Children’s prior history of noncompliance with the HIPAA Privacy and Security Rules.

Privacy 40

Privacy Security Insurance Encryption 40

Hunton Privacy

DECEMBER 18, 2017

As reported in BNA Privacy Law Watch , on December 6, 2017, health care provider 21st Century Oncology agreed to pay $2.3 million to settle charges by the Department of Health and Human Services’ (“HHS”) Office for Civil Rights (“OCR”) that its security practices led to a data breach involving patient information.

Data breaches 53

Data breaches Insurance Information Security Risk 53

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

Krebs on Security

MARCH 26, 2020

In a statement released this week, the Russian Federal Security Service (FSB) said 25 individuals were charged with circulating illegal means of payment in connection with some 90 websites that sold stolen credit card data. authorities in 2017.

Retail 275

Retail Insurance Cybersecurity Data breaches 275

eDiscovery Daily

JANUARY 9, 2018

But first, it’s also worth noting that Tom O’Connor and I will be discussing some of these cases – and what the legal profession can learn from those rulings – on Thursday’s webcast Important eDiscovery Case Law Decisions of 2017 and Their Impact on 2018 at noon CT (1pm ET, 10am PT). Los Alamos National Security, LLC et. You decide.

e-Discovery 39

e-Discovery Computer and Electronics Communications Cloud 39