IT Governance

AUGUST 3, 2020

Canadian insurer Heartland Farm Mutual says an employee’s email account breached (unknown). Brazilian health insurer Hapvida discloses cyber attack (unknown). Western Australia government hacked, with COVID-19 communications intercepted (unknown). Philadelphia-based insurer Independence Blue Cross confirms data breach (2,393).

Data breaches 141

Data breaches Insurance Ransomware Personal data 141

Security Affairs

MAY 9, 2020

Nigerian cyber gang SilverTerrier, specialized in BEC attacks, used COVID-19 lures in recent attacks on healthcare and government organizations. A first campaign was launched on January 30, 2020, experts observed with variations of the email subject sent in both English and Indonesian. ” continues the report.

Government 64

Government Energy and Utilities Insurance Phishing 64

IT Governance

MARCH 2, 2020

Unfortunately, the number of breached records doesn’t tell the full story, as there were a whopping 105 incidents – making February 2020 the second leakiest month we’ve ever recorded. Puerto Rico government loses $2.6 Wake County, NC, learns that third party breached government employee info (1,900). Ransomware.

Data breaches 145

Data breaches Ransomware Phishing Personal data 145

IT Governance

JANUARY 9, 2020

Cyber insurance has in some regions encouraged victims to pay as it is cheaper than remediation in some cases. Despite the rise in sophisticated attacks, 2020 will continue to see newbies and unskilled attackers using toolkits from the dark web to launch scams (such as sexploitation), and phishing and ransomware attacks.

Security 98

Security IoT Phishing Ransomware 98

IT Governance

MAY 5, 2020

The email claims in broken English that “in corporation with National Insurance and National Health Services the government established new tax refund programme for dealing with the coronavirus outbreak in its action plan”. Why would the government take money away from the NHS and give it to citizens?

Phishing 90

Phishing Government Insurance Data breaches 90

IT Governance

JANUARY 4, 2021

What else would you expect from the final month of 2020 than the highest number of publicly disclosed incidents we’ve ever recorded? That brings the total for 2020 to more than 20 billion. We logged 134 security incidents in December, which accounted for 148,354,955 breached records.

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

IT Governance

NOVEMBER 6, 2020

Government payment scheme. This scam claims that the UK government is paying all residents £258 to help them during the disruption caused by COVID-19. That doesn’t sound too far-fetched, and it is in a similar format to the nationwide text that the government sent when the UK went into lockdown. Supermarket vouchers.

Phishing 74

Phishing e-Delivery Government Insurance 74

IT Governance

SEPTEMBER 1, 2020

Toronto residents’ CERB payments on hold after fraudulent employment insurance claims (700) Kentucky’s unemployment system suffers another breach (unknown) Defence supplier PULAU Corporation says it has been hacked (unknown) American Payroll Association notifying those affected by cyber attack (unknown). Data breaches. Financial information.

Data breaches 122

Data breaches Ransomware Insurance Manufacturing 122

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. In addition to the monetary penalty of $5 million, NYDFS also accepted Carnival’s surrender of its insurance producer license; thus, Carnival has ceased selling insurance in New York.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Third-party governance. Archer was named a Leader in Gartner’s 2020 Magic Quadrant for IT risk management and IT vendor risk management tools.

Compliance 57

Compliance Risk Government Retail 57

Krebs on Security

FEBRUARY 19, 2020

10, 2020, Citrix disclosed additional details about the incident. A report released this week (PDF) by security firm ClearSky details how Iran’s government-backed hacking units have been busy exploiting security holes in popular VPN products from Citrix and a number of other software firms. 13, 2018 and Mar.

Passwords 353

Passwords Access Insurance Government 353

Hunton Privacy

JUNE 12, 2020

On June 9, 2020, the Federal Communications Commission (“FCC”) announced a proposed $225 million fine, the largest in the history of the FCC, against several individuals for telemarketing violations. The FCC alleged that John C. Spiller and Jakob A.

Insurance 96

Insurance IT Communications Government 96

Information Governance Perspectives

MARCH 10, 2020

Welcome to the AIIM 2020 Keynote Session Tomorrow’s Jobs Today, thinking beyond information management. For an insurance carrier, the goal is to protect people’s livelihoods and helping us get back on our feet after a disaster. Full transcript below. For a film studio, that’s producing content, and entertaining your audience.

Insurance 52

Insurance Blockchain Privacy Big data 52

Krebs on Security

JUNE 18, 2021

The SEC says First American derives nearly 92 percent of its revenue from its title insurance segment, earning $7.1 Title insurance protects homebuyers from the prospect of someone contesting their legitimacy as the new homeowner. Title insurance is not mandated by law, but most lenders require it as part of any mortgage transaction.

Insurance 270

Insurance Risk Financial Services Mining 270

IT Governance

DECEMBER 14, 2021

Organisations such as IT Governance that offer cyber security as a service assign dedicated experts to oversee the organisation’s data protection and data privacy needs. According to IBM’s Cost of a Data Breach Report 2020 , organisations spend £2.9 You’ll receive cyber insurance cover ?. You’ll achieve security peace of mind.

Security 131

Security Insurance Data breaches Information Security 131

IT Governance

JANUARY 7, 2020

In our first review of 2020, we look at a new twist on a PayPal scam, and discuss data breaches at an IVF treatment facility and in the Singapore government. The breach began at ST Logistics, a third-party vendor that both government departments use. Latest PayPal phishing scam goes for more than just your login details.

Phishing 94

Phishing Passwords Access Government 94

Getting Information Done

APRIL 18, 2017

billion connected devices to over 50 billion by 2020), a focus on people and process must move up in prominence to mount a coordinated defense and, eventually, an offense. As a result, companies are turning to cyber insurance. It makes one wonder if these programs or incentives will resemble what health insurance providers are dong.

Government 53

Government Cybersecurity Insurance Information governance 53

IT Governance

MARCH 20, 2024

Possible reasons for this trend change Reasons for organisations deprioritising security may include: Rising costs and economic uncertainty; Geopolitical tensions and uncertainty; and Fewer UK businesses identifying attacks or breaches, according to government data. % It also helps ensure your other measures get properly implemented.

Security 116

Security Data breaches Government Insurance 116

Hunton Privacy

JUNE 22, 2020

On July 1, 2020, amendments to Vermont’s data breach notification law, signed into law earlier this year, will take effect along with Vermont’s new student privacy law. Security Breach Notice Act.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Data Protection Report

SEPTEMBER 23, 2021

The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019. The CNIL’s inspection included the insurer’s compliance with Section 5-1(e) of GDPR , which reads: Personal data shall be. Perhaps the CNIL’s €1.75

Personal data 110

Personal data Insurance GDPR Record destruction 110

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. The Privacy Working Group has been reviewing state insurance privacy protections regarding the collection, ownership, use, and disclosure of information gathered in connection with insurance transactions.

Insurance 78

Insurance Paper Privacy Risk 78

eSecurity Planet

OCTOBER 18, 2021

” Nicko died nine months later, on April 16, 2020. ” Cyber Insurance No Longer Reliable. ” Cyber Insurance No Longer Reliable. ” Crockett said unofficial numbers indicate that only about 10 percent of such cyber insurance claims are paid out. Cyber Regulations Could Bring Fairness.

Ransomware 103

Ransomware Insurance Digital transformation Cybersecurity 103

IT Governance

NOVEMBER 6, 2023

When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised. Compromised information included patients’ names, dates of birth, postal addresses, Social Security numbers, diagnosis and treatment information, and health insurance information.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

AIIM

APRIL 21, 2022

It doesn’t matter if you’re an insurance company, local government agency, or something else. In tapping into the AIIM end-user community, we found impressive examples of that philosophy at work in leading organizations like Farmers Insurance, Ogilvy, and UnitedHealth Group.

Customer Experience 147

Customer Experience Digital transformation Insurance Government 147

Security Affairs

SEPTEMBER 1, 2020

“The adversary is particularly interested in exploits related to VPNs and network appliances , including CVE-2019-11510, CVE-2019-19781, and most recently CVE-2020-5902; reliance on exploits such as these lends to an opportunistic operational model.” .” reads the report published by Crowdstrike.

Access 88

Access Financial Services Retail Insurance 88

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. 27, 2020). 15, 2020). Background to the SEC’s Order Against First American.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Everteam

JULY 22, 2020

Data Management , Governing , Information Governance. 23 July 2020. About Everteam: Founded in 1990, Everteam is a software editor specialized in content management and information governance. In January 2020, Everteam became part of the Kyocera Group (more than 76,000 employees worldwide, $14.6 Nicolas d'Ambrosio.

Cloud 52

Cloud Information governance IT Artificial Intelligence 52

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Krebs on Security

APRIL 3, 2023

” As KrebsOnSecurity reported in 2020, Bruno was at the time promoting himself as the co-CEO of a company called SafeSwiss Secure Communication AG , and the founder of another tech startup called Secure Swiss Data. According to DomainTools.com , that website name was registered in 2015 by The Inside Knowledge GmbH.

Communications 205

Communications Marketing Security Insurance 205

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). Violations of the Act are subject to civil penalties. Department of Health and Human Services pursuant to HIPAA and the HITECH Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Security Affairs

NOVEMBER 15, 2022

Further analysis, revealed that the same threat actor targeted multiple regions using a similar Cobalt Strike loader and has been active since 2020. The experts attributed the attacks to a new subgroup of the China-linked APT41 group, tracked as Earth Longzhi.

Archiving 88

Archiving Passwords Metadata Insurance 88

IT Governance

MARCH 31, 2022

If you’re facing a cyber security disaster, IT Governance is here to help. million records breached appeared first on IT Governance UK Blog. maladie suffers cyber attack (519,000) Dialyze Direct, LLC?in In other news… Breach notification: Poor transparency complicates response NIS 2.0—the

Data breaches 111

Data breaches Ransomware Insurance Government 111

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Data Protection Report

APRIL 30, 2024

In December 2020, the company revised its privacy policy (increasing its size to 15 pages) and added a statement that it used Facebook Pixel, a web analytics and advertising service by Facebook, Inc. As indicated in the paragraph quoted above, the company collected some very sensitive personal information.

Personal data 85

Personal data Privacy Information governance Compliance 85

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Third-party governance. Archer was named a Leader in Gartner’s 2020 Magic Quadrant for IT risk management and IT vendor risk management tools.

Compliance 67

Compliance Risk Government Retail 67

eSecurity Planet

FEBRUARY 14, 2023

When Markowitz departed Portfolium after selling the company to Instructure, he teamed up with Daniel Marashalin and Troy Markowitz to launch Drata in the summer of 2020. First of all, cybersecurity is becoming a “must have” for businesses and governments. This is all done with continuous control monitoring and evidence collection.

Compliance 113

Compliance Security Cybersecurity Marketing 113

erwin

APRIL 11, 2019

Some suggest the California Consumer Privacy Act (CCPA), which takes effect January 1, 2020, sets a precedent other states will follow by empowering consumers to set limits on how companies can use their personal information. The Regulatory Rationale for Integrating Data Management & Data Governance. employees).

GDPR 100

GDPR e-Discovery Compliance Metadata 100