Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. Kentucky Governor Andy Beshear signed House Bill 474 into law, and Maryland Governor Larry Hogan signed SB 207.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. In addition to the monetary penalty of $5 million, NYDFS also accepted Carnival’s surrender of its insurance producer license; thus, Carnival has ceased selling insurance in New York.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Krebs on Security

MAY 31, 2019

No authentication was needed to access the digitized records. First American says it has hired a third-party security firm to investigate, and that it shut down external access to the records. ” . ”

Financial Services 211

Financial Services Insurance Sales Authentication 211

Security Affairs

NOVEMBER 2, 2023

Cloud identity and access management solutions provider Okta warns nearly 5,000 employees that their personal information was exposed due to a data breach suffered by the third-party vendor Rightway Healthcare. ” Exposed data include name, Social Security Number, and health or medical insurance plan number.

Data breaches 120

Data breaches Insurance Access Authentication 120

Security Affairs

MAY 12, 2024

In December 2023, Elliptic and Corvus Insurance published a joint research that revealed the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. ” reads the CSA. According to the experts, the ransomware gang has infected over 329 victims, including ABB , Capita , Dish Network , and Rheinmetall.

Ransomware 118

Ransomware Blockchain Retail Insurance 118

IT Governance

NOVEMBER 20, 2018

This blog covers access controls. Most organisations have some form of authentication, but inconsistent or weak authorisation procedures can create vulnerabilities that need to be identified and fixed. Deficient access controls result in security breaches. Secure your access controls.

Access 83

Access Security Authentication Passwords 83

Krebs on Security

JANUARY 29, 2021

The unprecedented volume of unemployment insurance fraud witnessed in 2020 hasn’t abated, although news coverage of the issue has largely been pushed off the front pages by other events. Another 17 percent of claims — nearly $20 billion more – are suspected fraud. In a notice posted Jan. 28 , the U.S.

Insurance 301

Insurance Personal data Authentication IT 301

Data Matters

SEPTEMBER 18, 2019

Under the revised Payment Services Directive (2015/2366) (PSD2), the European Banking Authority (EBA) and the European Commission were required to develop and adopt regulatory technical standards on strong customer authentication and common and secure open standards of communication. STRONG CUSTOMER AUTHENTICATION. What is SCA?

Authentication 102

Authentication e-Delivery Risk Sales 102

The Last Watchdog

JUNE 9, 2022

When you contact the support number for assistance, the scammer may ask for remote access to your computer and payment to repair it. Once they get remote access, fraudsters hack confidential details of older adults and scam them. Then they steal your personal and financial information using that information. Identity-theft.

Privacy 274

Privacy Security Phishing Insurance 274

The Last Watchdog

AUGUST 19, 2021

According to the attackers, this was a configuration issue on an access point T-Mobile used for testing. The configuration issue made this access point publicly available on the Internet. It is shocking that a server with that amount on sensitive PII data was accessible and was stored in an unencrypted state.

Data breaches 306

Data breaches Authentication Access Personal data 306

Krebs on Security

APRIL 26, 2021

Last week, KrebsOnSecurity heard from a reader who had his freeze thawed without authorization through Experian’s website, and it reminded me of how truly broken authentication and security remains in the credit bureau space. “You won’t see alerts if someone tries to access your file. and $24.99

Security 316

Security Authentication Access Insurance 316

Data Matters

FEBRUARY 25, 2021

The FCA is proposing amendments to: the UK onshored versions of EU technical standards on strong customer authentication (SCA) and common and secure methods of communication (UK SCA-RTS); its Approach Document on Payment Services and Electronic Money (Approach Document); and. TPP access. its Perimeter Guidance Manual (PERG).

Authentication 68

Authentication Paper Risk Insurance 68

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

Traditionally, airport security focused on physical access and the perimeter; however, in the years since 9/11, the digital footprint of the vast interconnected systems contains valuable assets that must be protected. Airports are high-risk locations and more vulnerable to cyber-attacks than airlines.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

Data Matters

JANUARY 28, 2022

These recommendations are further detailed below, but two to note in particular: The Advisory recommends that organizations “require multi-factor authentication for all users, without exception.” Require multi-factor authentication (MFA) for all users. Enable Controlled Folder Access.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Krebs on Security

JUNE 4, 2019

AMCA has advised LabCorp that Social Security Numbers and insurance identification information are not stored or maintained for LabCorp consumers.” Many readers wrote in to say they’d never heard of First American, but it is the largest title insurance company in the United States. million patients.

Insurance 248

Insurance Data Privacy Access Security 248

Krebs on Security

DECEMBER 8, 2022

Holden said the internal discussions among the Venus group members indicate this gang has no problem gaining access to victim organizations. Using hard-to-crack unique passwords to protect sensitive data and accounts, as well as enabling multi-factor authentication. “The Venus group has problems getting paid,” Holden said.

Ransomware 262

Ransomware Metadata Insurance Encryption 262

Dark Reading

MAY 24, 2019

Real estate title firm reportedly has closed a hole in its website that had left hundreds of millions of real estate tile insurance files accessible without authentication, according to KrebsOnSecurity.

Insurance 94

Insurance Authentication Access IT 94

Thales Cloud Protection & Licensing

MAY 9, 2022

Contrary to reports, the company paid nearly $5 million as a ransom to get access to all their systems. For example, both directives makes it mandatory for all agencies to deploy multi-factor authentication and encryption. Cyber insurance coverage ramps up. east coast. One in five businesses are willing to pay the ransom.

Insurance 71

Insurance Ransomware Encryption Authentication 71

Krebs on Security

JUNE 15, 2023

government agency in charge of improving the nation’s cybersecurity posture is ordering all federal agencies to take new measures to restrict access to Internet-exposed networking equipment. “This is reachable pre-authentication, on every SSL VPN appliance,” French vulnerability researcher Charles Fol tweeted.

Risk 210

Risk Ransomware Cybersecurity Access 210

Krebs on Security

AUGUST 17, 2023

Security experts investigating 16Shop found the service used an application programming interface (API) to manage its users, an innovation that allowed its proprietors to shut off access to customers who failed to pay a monthly fee, or for those attempting to copy or pirate the phishing kit.

Phishing 190

Phishing Passwords Insurance Sales 190

Security Affairs

MARCH 17, 2024

France Travail data breach impacted 43 Million people Scranton School District in Pennsylvania suffered a ransomware attack Lazarus APT group returned to Tornado Cash to launder stolen funds Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case UK Defence Secretary jet hit by an electronic warfare attack in Poland Cisco (..)

Data breaches 109

Data breaches Security Computer and Electronics Ransomware 109

Hunton Privacy

NOVEMBER 20, 2013

On November 4, 2013, the China Insurance Regulatory Commission, which is the Chinese regulatory and administrative authority for the insurance sector, issued the Interim Measures for the Management of the Authenticity of Information of Life Insurance Customers (the “Measures”).

Insurance 40

Insurance Personal data Authentication Records Management 40

Data Protection Report

JUNE 2, 2021

million settlement with two related insurance companies, relating to violations of two different requirements of the NYDFS cybersecurity regulation during the period 2018 to 2019. This matter began when insurance affiliate #1, licensed by NYDFS, discovered a phishing email in September of 2018. NYDFS Cybersecurity Regulation.

Cybersecurity 71

Cybersecurity Insurance Financial Services Phishing 71

Krebs on Security

AUGUST 12, 2019

Securities and Exchange Commissio n (SEC) is investigating a security failure on the Web site of real estate title insurance giant First American Financial Corp. No authentication was required to view the documents. First American Financial Corp. In May, KrebsOnSecurity broke the news that the Web site for Santa Ana, Calif.

Insurance 225

Insurance Access Authentication Cybersecurity 225

Security Affairs

OCTOBER 9, 2021

” CMG quickly took its systems offline as a precautionary measure and took additional steps to prevent further unauthorized access.” CMG discovered the incident on the same day, when CMG observed that certain files were encrypted and inaccessible.” ” continues the notification. ” concludes the letter.

Ransomware 104

Ransomware Insurance Encryption Authentication 104

Security Affairs

FEBRUARY 25, 2024

Apple created post-quantum cryptographic protocol PQ3 for iMessage Russian hacker is set to face trial for the hack of a local power grid Microsoft released red teaming tool PyRIT for Generative AI CISA orders federal agencies to fix ConnectWise ScreenConnect bug in a week FTC charged Avast with selling users’ browsing data to advertising companies (..)

Military 99

Military Security Ransomware Insurance 99

IT Governance

NOVEMBER 6, 2023

While investigating the incident, it discovered that confidential consumer information had been accessed by an unauthorised third party. On 2 September, it confirmed that an unauthorised party had accessed or removed some of its files, some of which contained confidential patient information.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

The Last Watchdog

JULY 30, 2018

All the user needs is a strong password to access to the data. But in certain cases the cloud is not readily accessible. It has a battery, so it’s platform independent and you don’t have to rely on the computer’s operating system to turn it on or authenticate it. The hardware itself takes care of it for you.

Encryption 203

Encryption Military Passwords Authentication 203

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Security Affairs

JANUARY 18, 2023

On December 12, 2022, the Cybernews research team discovered a publicly accessible database with 260GB of sensitive personal data belonging to myrocket.co, offering ‘end-to-end’ recruitment solutions and HR services for companies in India. The discovered database was not protected by authentication. HR management platform myrocket.co

Privacy 90

Privacy Insurance Personal data Phishing 90

Thales Cloud Protection & Licensing

MARCH 22, 2023

Banking, finance, and insurance institutions must safeguard consumer information and accounts while providing customers continuous access to their balances and funds. On the other hand, if you can consistently impress your customers with personalized, easy-to-access and use service, you can dramatically increase their lifetime value.

Customer Experience 71

Customer Experience Security Authentication Privacy 71

Thales Cloud Protection & Licensing

FEBRUARY 9, 2023

Identity and access management for players, staff & ticket holders Tickets sold through all major ticket vendors will most likely be digital, optimized for mobile, and email accessible. For that reason, it’s more important than ever to secure authentication with phishing-resistant MFA or passwordless log-in.

Security 71

Security Authentication Phishing Access 71

Data Protection Report

FEBRUARY 8, 2022

According to the settlement agreement, the threat actor obtained access to the EyeMed email account on approximately June 24, 2020 and not only obtained access to six years’ worth of information, but also began sending 2,000 phishing emails on July 1. EyeMed blocked the threat actor’s access on July 1.

Passwords 98

Passwords Financial Services Authentication Insurance 98

AIIM

OCTOBER 15, 2018

In North America, e-signatures are based on multiple authentication aspects with a focus on knowledge-based authentication which cannot be applied in EU due to much stricter privacy regulations. Allianz was mapping the insurance buyer’s journey across all product lines to identify what’s required for best-in-class signing experiences.

Compliance 109

Compliance Insurance Digital transformation Authentication 109

Adam Levin

APRIL 10, 2019

The analysis was conducted by the Aite Group, which looked at mobile apps in eight categories: retail banking, credit cards, mobile payment, healthcare savings, retail finance, health insurance, auto insurance and cryptocurrency.

Retail 74

Retail Security Insurance Encryption 74