IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. In November 2023, Northwell Health – the largest health system in New York – confirmed that it was affected by the incident.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Krebs on Security

FEBRUARY 20, 2024

The government says Russian national Artur Sungatov used LockBit ransomware against victims in manufacturing, logistics, insurance and other companies throughout the United States. Europol said two suspected LockBit actors were arrested in Poland and Ukraine, but no further information has been released about those detained.

Ransomware 271

Ransomware Encryption Insurance Manufacturing 271

eDiscovery Daily

FEBRUARY 12, 2024

There was also a greater embracing of new ways of getting legal done, with can’t-be-ignored tech like GenAI, data management and handling the ever-growing modern data in discovery cracking open the remaining closed doors to innovation for law firms, government and corporate teams alike.

CMS 41

CMS Phishing Communications Insurance 41

eDiscovery Daily

FEBRUARY 11, 2024

There was also a greater embracing of new ways of getting legal done, with can’t-be-ignored tech like GenAI, data management and handling the ever-growing short message data in discovery cracking open the remaining closed doors to innovation for law firms, government and corporate teams alike.

CMS 41

CMS Phishing Communications Insurance 41

Security Affairs

FEBRUARY 27, 2024

Optum Solutions is a subsidiary of UnitedHealth Group, a leading health insurance company in the United States. “On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems. .

Ransomware 91

Ransomware Government Insurance Manufacturing 91

Security Affairs

FEBRUARY 28, 2024

The US agencies released a report containing IOCs and TTPs associated with the ALPHV Blackcat RaaS operation identified through law enforcement investigations conducted as recently as February 2024. This additional reward aims to target affiliated and initial access brokers involved and that facilitated the attacks of the group.

Ransomware 106

Ransomware Government Insurance Manufacturing 106

IT Governance

MAY 7, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight More than 6 million accounts compromised from streaming service MovieBoxPro MovieBoxPro, a streaming service of “questionable legality”, suffered a data scraping incident on 15 April 2024, according to Have I Been Pwned. Data breached: 395 GB.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Data Protection Report

JANUARY 4, 2024

Does the national defense bill (National Defense Authorization Act for Fiscal Year 2024, signed on December 22, 2023) require the Department of Defense to develop a “bug bounty” program for certain large artificial intelligence models being integrated into the missions and operations of the Department of Defense? b (within 2 hours).

Privacy 110

Privacy Cybersecurity Artificial Intelligence e-Discovery 110

Data Protection Report

APRIL 30, 2024

On April 15, 2024, the U.S. The order also requires Cerebral to permit individuals to access or delete their data, and the company has 30 days to respond to such as request, which can be extended for an additional 30 days when “reasonably necessary.” We are seeing order after order in the U.S.

Personal data 85

Personal data Privacy Information governance Compliance 85

Hunton Privacy

MAY 10, 2022

The CTDPA exempts certain entities, including, for example, state and local government entities, nonprofits, higher education institutions, financial institutions subject to the Gramm-Leach-Bliley Act (“GLB”), and qualifying covered entities and business associates subject to the Health Insurance Portability and Accountability Act (“HIPAA”).

Privacy 118

Privacy Personal data Sales B2B 118

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

Security Affairs

FEBRUARY 8, 2024

26 key cyber security stats for 2024 that every user should know, from rising cyber crime rates to the impact of AI technolog y. Cyber Insurance: US cyber insurance premiums soared by 50% in 2022, reaching $7.2 RaaS usage is expected to increase by 25% in 2024. Shockingly, 96% of these attacks come through email.

Security 123

Security Phishing IoT Ransomware 123

IT Governance

APRIL 22, 2024

million records from World-Check, a screening database used to screen potential customers for links to illegal activity and government sanctions. GhostR says it obtained the records from a Singapore-based company with access to the database. Account records from the United States were also accessed. Data breached: unknown.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

APRIL 9, 2024

Other databases contained health insurance data, such as patents’ names, dates of birth, addresses and medical data. EyeCare Services Partners exposes more 3.5 The biggest database in the blob contained 3.1 million patients and 1.6 million unique Social Security numbers. Source (New) Manufacturing USA Yes 1.1

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

IT Governance

MARCH 5, 2024

GB dataset on a hacking forum, claiming to still have access to the breached system. TB Turtlemint Source (New) Insurance India Yes 1,800,000 Chunghwa Telecom Source (New) Telecoms Taiwan Yes 1.7 Affected information includes users’ names, email addresses, IP addresses and encrypted passwords.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

FEBRUARY 27, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight loanDepot rep orts an extra 324,071 victims In January, the mortgage lender loanDepot announced in an SEC filing that an unauthorised third party had gained access to the sensitive personal information of about 16.6 Key date 31 March 2024 – PCI DSS v4.0

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

IT Governance

JANUARY 16, 2024

Other news UK government accused of being misleading over new encryption laws techUK, a trade association representing more than 1,000 businesses in the technology sector, including Apple and Meta, has accused the UK government of underplaying the significance of the new Investigatory Powers (Amendment) Bill.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 23, 2024

Microsoft gives all businesses access to AI-powered Office features When Microsoft launched Copilot for Office 365 in November 2023, it required enterprise customers to have at least 300 users. O’Hara & Sons, Inc. It has now removed that requirement, opening up Copilot to businesses of all sizes.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 30, 2024

Compromised data includes victims’ names, addresses, phone numbers and Aadhaar numbers (a 12-digit government identification number). It remains unclear how the data breach occurred, but the attackers apparently suggested it was the result of “exploiting vulnerabilities within government databases of telecommunication systems”.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. 20% increase accesses of specific organizations advertised. 13% maintain access to company tools or resources after leaving the organization.

Cybersecurity 94

Cybersecurity Ransomware Passwords Cloud 94

Hunton Privacy

FEBRUARY 28, 2024

As reported on the Hunton Employment & Labor Perspectives blog , on February 15, 2024, California lawmakers introduced the bill AB 2930. AB 2930 aims to prevent algorithmic discrimination through impact assessments, notice requirements, governance programs, policy disclosure requirements and providing for civil liability.

Artificial Intelligence 58

Artificial Intelligence Government Risk Financial Services 58

IT Governance

JANUARY 3, 2024

TB exfiltrated Comcast Cable Communications, LLC (Xfinity) Source 1 ; source 2 (New) Telecoms USA Yes 35,879,455 Tecnoquadri Srl Source (New) Manufacturing Italy Yes 33,000,000 Asia Insurance Co.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

IT Governance

APRIL 29, 2024

million to settle a complaint alleging that the home security camera company Ring “allowed employees and contractors to access consumers’ private videos and failed to implement security protections, enabling hackers to take control of consumers’ accounts, cameras, and videos”. iSharing is used by more than 35 million users.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Data Matters

JULY 28, 2021

Notably, the CPA exempts data “created by a covered entity for the purposes of complying with HIPAA” but does not have an entitywide exemption for Health Insurance Portability and Accountability Act (HIPAA)-regulated entities. – – Access personal information. Both the VCDPA and CPRA exempt entities regulated by HIPAA.

Privacy 88

Privacy Sales Personal data Compliance 88

Security Affairs

APRIL 28, 2024

Companies and Government Agencies ArcaneDoor – New espionage-focused campaign found targeting perimeter network devices Israel Tried to Keep Sensitive Spy Tech Under Wraps. Every week the best security articles from Security Affairs are free for you in your email box.

Security 97

Security Data breaches Ransomware Mining 97

Hunton Privacy

FEBRUARY 1, 2024

On January 22, 2024, a draft of the final text of the EU Artificial Intelligence Act (“AI Act”) was leaked to the public. Employment, Workers Management and Access to Self-Employment. Access to and Enjoyment of Essential Private Services and Essential Public Services and Benefits. Education and Vocational Training.

Risk 114

Risk Education Artificial Intelligence Insurance 114

IT Governance

DECEMBER 19, 2023

According to Delta Dental’s breach notification, affected personal data included addresses, Social Security numbers, driver’s license numbers or other state identification numbers, passport numbers, financial account information, tax identification numbers, individual health insurance policy numbers and health information.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

KnowBe4

JUNE 6, 2023

There are concerns that China has already collected a massive amount of data on government officials and ordinary U.S. The scammers also launched brute-force attacks to gain access to accounts with simple passwords. To achieve this, China would need to develop the necessary cyber, psychological and social engineering capabilities.

Phishing 72

Phishing Security awareness IT Passwords 72

Security Affairs

FEBRUARY 25, 2024

Law enforcement also had access to data stolen from the victims of the ransomware operation, a circumstance that highlights the fact that even when a ransom is paid, the ransomware gang often fails to delete the stolen information. lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id[.]onion The problem doesn't just affect me.

Government 116

Government Ransomware Encryption Passwords 116

Schneier on Security

MARCH 7, 2024

With the world’s focus turning to misinformation , manipulation , and outright propaganda ahead of the 2024 U.S. Both challenges must be addressed for the sake of democratic governance and public protection. Taiwan, a leader in global AI, has innovated in both the public development and governance of AI.

CMS 104

CMS Government Marketing Cloud 104