Data Protection Report

NOVEMBER 8, 2023

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. Additional changes to required policies and procedures will not begin to take effect until April 2024 and rolling thereafter.

Financial Services 110

Financial Services Cybersecurity Compliance Government 110

Security Affairs

APRIL 28, 2024

ICICI Bank Limited is an Indian multinational bank and financial services company headquartered in Mumbai. It offers a wide range of banking and financial services for corporate and retail customers. Exposed financial information includes credit card numbers, expiry dates, and card verification values (CVV).

Financial Services 123

Financial Services Retail IT Information Security 123

Thales Cloud Protection & Licensing

NOVEMBER 4, 2020

Financial Services Organizations Need to Adapt their Security Practices to the Shifting Environment. Even “traditional banks” seek to drive more revenue from digital products, personalized services and experiences. At the same time, financial services organizations need to adapt to a shifting global environment.

Financial Services 62

Financial Services Security Digital transformation Encryption 62

IT Governance

FEBRUARY 21, 2024

Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Date breached: 384,658,212 records. North Hill Needham, Inc.,

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Hunton Privacy

NOVEMBER 8, 2023

On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. Regulated entities generally have until April 29, 2024 to comply with the amended Regulation.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

Data Protection Report

APRIL 23, 2024

On 22 April 2024, the Financial Conduct Authority ( FCA ) published a speech by its chief executive, Nikhil Rathi, entitled ‘Navigating the UK’s Digital Regulation Landscape: Where are we headed?’. The FCA also sets out its next steps.

Financial Services 45

Financial Services IT Marketing Retail 45

Security Affairs

APRIL 3, 2024

Resecurity researchers warn that a new Version of JsOutProx is targeting financial institutions in APAC and MENA via Gitlab abuse. Resecurity has detected a new version of JSOutProx , which is targeting financial services and organizations in the APAC and MENA regions.

Financial Services 108

Financial Services Phishing IT Information Security 108

Security Affairs

JANUARY 23, 2024

Financial services company LoanDepot disclosed a data breach that impacted roughly 16.6 LoanDepot is a financial services company that primarily operates as a mortgage lender. The company provides a range of mortgage and non-mortgage loan products and services. million individuals. million individuals.

Data breaches 117

Data breaches Financial Services Cybersecurity Ransomware 117

Hunton Privacy

FEBRUARY 7, 2023

On January 26, 2023, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth responded to a call for input from the UK’s Digital Regulation Cooperation Forum (DRCF) on its workplan for 2023 – 2024.

Data Privacy 61

Data Privacy Blockchain Compliance Privacy 61

Thales Cloud Protection & Licensing

APRIL 29, 2024

The Evolving Legislative and Compliance Landscape: A Roadmap for Business Leaders madhav Tue, 04/30/2024 - 05:32 Trust is the currency of the digital economy. The Thales 2024 Trust Index report indicates that 87% of consumers expect vendors to respect their digital rights, which leads to trusted relationships.

Compliance 71

Compliance Cybersecurity Risk Manufacturing 71

IBM Big Data Hub

MARCH 20, 2024

Organizations in the financial services, healthcare and other regulated sectors must place an even greater focus on managing risk—not only to meet compliance requirements, but also to maintain customer confidence and trust. This means actively minimizing downtime and closing gaps in the supply chain to remain competitive.

Cloud 84

Cloud Financial Services Risk Business Services 84

Security Affairs

FEBRUARY 19, 2024

Return here for more information at: 11:30 GMT on Tuesday 20th Feb” The Operation Cronos operation is still ongoing and NCA’s announced that more information will be published tomorrow, February 20, 2024. “The site is now under the control of law enforcement.

Energy and Utilities 116

Energy and Utilities Ransomware Agriculture Financial Services 116

The Last Watchdog

FEBRUARY 15, 2024

15, 2024 – Harter Secrest & Emery LLP , a full-service business law firm with offices throughout New York, is pleased to announce that it has been selected as a NetDiligence-authorized Breach Coach ® , a designation only extended to law firms that demonstrate competency and sophistication in data breach response. Rochester, N.Y.

Data breaches 100

Data breaches Financial Services Big data Retail 100

Hunton Privacy

JUNE 9, 2022

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). Information Security Program Requirements. On May 27, 2022, Vermont Governor Phil Scott signed H.515

Insurance 107

Insurance Security Information Security Cybersecurity 107

Data Protection Report

JANUARY 18, 2024

2024 was not a happy new year for Genesis Global Trading, Inc. (“GGT”). NYDFS conducted its first audit of GGT for the period of May 17, 2018 through March 31 2019. NYDFS conducted its first audit of GGT for the period of May 17, 2018 through March 31 2019. NYDFS found violations of both the cybersecurity and virtual currency regulations.

Cybersecurity 110

Cybersecurity Financial Services Compliance Encryption 110

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Compliance madhav Tue, 09/19/2023 - 05:17 It is essential for any business that stores, processes, and transmits payment card information to comply with the Payment Card Industry Data Security Standard (PCI DSS). Consumers’ payment data is a compelling target for criminals who continue to circumvent IT security defenses.

Compliance 77

Compliance Financial Services Data breaches Encryption 77

IBM Big Data Hub

DECEMBER 18, 2023

As we look ahead to 2024, enterprises around the world are undoubtedly evaluating their progress and creating a growth plan for the year to come. Securely balancing the influx of data from AI with innovation At the same time, we’re helping clients embrace AI securely to fuel business transformation.

Cloud 74

Cloud Financial Services Compliance Digital transformation 74

IBM Big Data Hub

JULY 12, 2023

As a leading financial group in Spain, CaixaBank has long been an innovator by taking a technology-first approach by placing innovation, digital transformation, customer experience and sustainable banking at the forefront of its strategy. CaixaBank is continuing its initiative to increase cloud absorption.

Digital transformation 54

Digital transformation Financial Services Cloud Customer Experience 54

IT Governance

NOVEMBER 23, 2023

The financial sector is quite heavily regulated, and involves a lot of confidential data. You’d therefore expect that the sector fares better at data security than your average organisation. Perhaps even more concerning to EU lawmakers is how dependent society at large is on banking and other financial services.

Risk 104

Risk Data breaches Authentication Financial Services 104

Thales Cloud Protection & Licensing

FEBRUARY 12, 2024

Why organizations need to prioritize a PQC-readiness lab madhav Tue, 02/13/2024 - 05:25 It’s an exciting time for technology – we are on the cusp of seeing some innovative and disruptive new technologies emerge that will have impacts on every industry and sector around the globe.

Artificial Intelligence 71

Artificial Intelligence Cloud Risk Digital transformation 71

Security Affairs

FEBRUARY 20, 2024

pic.twitter.com/SvpbeslrCd — vx-underground (@vxunderground) February 19, 2024 The operation led to the arrest of two members of the ransomware gang in Poland and Ukraine and the seizure of hundreds of crypto wallets used by the group. Lockbit ransomware group administrative staff has confirmed with us their websites have been seized.

Energy and Utilities 111

Energy and Utilities Ransomware Manufacturing Agriculture 111

Thales Cloud Protection & Licensing

JANUARY 10, 2024

Navigating the EU-US Data Protection Framework sparsh Thu, 01/11/2024 - 05:26 On 10 July 2023, the European Commission adopted a new adequacy decision regarding the Data Privacy Framework (“DPF”). This follows the invalidation of the EU-US Privacy Shield, by the Court of Justice of the European Union on 16 July 2020. But does it really?

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

IT Governance

MARCH 11, 2024

Source 1 ; source 2 (Update) IT services Taiwan Yes 2,451,197 RMH Franchise Corporation Source (New) Hospitality USA Yes 1.5 Source 1 ; source 2 (Update) IT services Taiwan Yes 2,451,197 RMH Franchise Corporation Source (New) Hospitality USA Yes 1.5 Source (New) Professional services Netherlands Yes 28.3 TB Paysign, Inc.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

JANUARY 16, 2024

Securities and Exchange Commission Source 1 ; source 2 (New) Public USA No 0 NETGEAR Source (New) Telecoms USA No 0 Note 1: ‘New’/‘Update’ in the first column refers to whether this breach was first publicly disclosed this week, or whether a significant update was released this week.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

eSecurity Planet

APRIL 22, 2024

Once released, the PoC starts the clock for active attacks, especially for security tools, as demonstrated in active attacks on Palo Alto’s PAN-OS vulnerability fixed the week before. Unless major security players [adopt] secure-by-design architectures, this trend will only accelerate due to platformization and consolidation.”

Authentication 62

Authentication MDM Cloud Cybersecurity 62

IT Governance

JANUARY 23, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight More than 70 million email addresses added to Have I Been Pwned The security researcher Troy Hunt has added more than 70 million email addresses from the Naz.API data set to his Have I Been Pwned data breach notification service. VF Corporation confirms 35.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Thales Cloud Protection & Licensing

JANUARY 22, 2024

Digital Onboarding: Convenience Meets Security in Banking madhav Tue, 01/23/2024 - 06:34 What onboarding in consumer banking was five years ago, where it stands today, and where it's heading is a business-critical change worth both understanding and optimizing.

Security 77

Security Authentication Passwords Risk 77

IBM Big Data Hub

APRIL 11, 2024

A cloud-based infrastructure that uses IBM Cloud® for Financial Services can be the answer to ensure the security, privacy and flexibility needed to keep up with these changes in the industry. Privacy and data security are the primary concerns regarding AI in instant payments transactions.

Cloud 68

Cloud Financial Services Privacy Compliance 68

Data Protection Report

APRIL 9, 2024

On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published a Notice of Proposed Rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”), which imposes new reporting requirements for entities operating in critical infrastructure sectors.

Ransomware 83

Ransomware Agriculture Cybersecurity Government 83

Thales Cloud Protection & Licensing

APRIL 15, 2024

In High Demand - How Thales and DigiCert Protect Against Software Supply Chain Attacks madhav Tue, 04/16/2024 - 05:25 Software supply chain attacks have been rapidly increasing in the past few years. However, the combined partnership of Thales and DigiCert offers solutions to help protect against these security risks.

Risk 62

Risk Financial Services Retail Cloud 62

Thales Cloud Protection & Licensing

JANUARY 15, 2024

Financial Supervision in a Digital World madhav Tue, 01/16/2024 - 05:44 If you’ve been working in the finance sector over the past few years, you will have noticed some big changes in the world of financial supervision. Inefficient login portals We see a lot of financial supervisors struggling with these new challenges.

Unstructured data 71

Unstructured data B2B Access Financial Services 71

IT Governance

APRIL 29, 2024

Keyboard app vulnerabilities reveal keystrokes to network eavesdroppers Security researchers have identified critical security vulnerabilities in Cloud-based pinyin keyboard apps from Baidu, Inc., Known data breached Discord (via Spy.pet) Source (New) IT services USA Yes 4,186,879,104 Baidu, Inc.,

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Data Matters

DECEMBER 28, 2020

The IAIS intends to determine by the end of 2024 whether the AM will be considered “outcome equivalent” to the ICS. The National Association of Insurance Commissioners (NAIC) held its Fall 2020 National Meeting (Fall Meeting) December 3-9, 2020. As a result of the continuing COVID-19 pandemic, the NAIC once again met in a virtual format.

Insurance 68

Insurance Paper Risk Analytics 68

Thales Cloud Protection & Licensing

FEBRUARY 28, 2024

How better key management can close cloud security gaps troubling US government madhav Thu, 02/29/2024 - 05:38 In my first blog on this topic I noted a Treasury Department report released last year listed six cloud security challenges financial sector firms face. Thales can help address the following four challenges: 1.

Cloud 77

Cloud Government Encryption Security 77

Security Affairs

NOVEMBER 19, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 107

Security Data breaches Ransomware Financial Services 107

Thales Cloud Protection & Licensing

MARCH 14, 2024

Keeping Customer Data Safe: AI's Privacy Paradox andrew.gertz@t… Thu, 03/14/2024 - 17:38 AI's appeal lies in its ability to personalize and streamline customer experiences in ways previously unimaginable. This finding is backed up by the Thales 2024 Consumer Digital Trust Index, “Building Digital Experiences that Enhance Consumer Trust.”

Privacy 71

Privacy Data Privacy Analytics Risk 71

The Last Watchdog

NOVEMBER 16, 2023

As the US’s critical infrastructure stands on high alert , cybersecurity firm Bridewell, spotlights the critical trends and emerging dangers cyber teams must watch out for in 2024. The only thing they won’t do in 2024, is pay taxes. Big year for cyber in politics?

Ransomware 100

Ransomware Cybersecurity Financial Services Marketing 100