IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Key dates 31 March 2024 – PCI DSS v4.0 The total number of victims is now more than 5 million. transitioning deadline Version 3.2.1 of the Standard.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

FEBRUARY 14, 2024

GB Western Municipal Construction Source New Construction and real estate USA Yes 101 GB Tennessee Farmers Insurance Source New Insurance USA Yes 71,000 CNO ACE Source 1 ; source 2 New Healthcare USA Yes 65,195 Verizon Communications Inc. Key dates 31 March 2024 – PCI DSS v4.0 GB Signature Performance, Inc. of the Standard.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

MARCH 11, 2024

Other news ISO/IEC 27006:2024 published ISO (the International Organization for Standardization) and the IEC (International electrotechnical Commission) have published a new standard in the ISO 27000 information security series. Key dates 31 March 2024 – PCI DSS v4.0 Key dates 31 March 2024 – PCI DSS v4.0 of the Standard.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Data Protection Report

APRIL 9, 2024

On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published a Notice of Proposed Rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”), which imposes new reporting requirements for entities operating in critical infrastructure sectors.

Ransomware 83

Ransomware Agriculture Cybersecurity Government 83

IT Governance

JANUARY 3, 2024

TB exfiltrated Comcast Cable Communications, LLC (Xfinity) Source 1 ; source 2 (New) Telecoms USA Yes 35,879,455 Tecnoquadri Srl Source (New) Manufacturing Italy Yes 33,000,000 Asia Insurance Co. Source (New) Finance USA Yes 33.96

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107