IT Governance

NOVEMBER 3, 2023

Introducing our Data Breach Dashboard We’re excited to introduce our new monthly Data Breach Dashboard – a one-page overview of this month’s key findings that you can download for free. You’ll also be able to download each month’s data (and our sources) from the same page as the corresponding Dashboard. Where ‘up to’, etc.

Data breaches 87

Data breaches Insurance Ransomware Education 87

IT Governance

JANUARY 5, 2024

For instance, a two-month Europol action (revealed to the public on 22 December) discovered that 443 organisations had suffered data breaches – specifically, their customers’ payment card data had been compromised. This blog provides analysis of the data we’ve collected. We log this as 41 incidents.

Data breaches 97

Data breaches Insurance Manufacturing Ransomware 97

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. Healthcare Data Privacy Laws.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Security Affairs

FEBRUARY 26, 2021

Data Breach: WizCase team uncovered a massive data leak containing private information about Turkish Citizens through a misconfigured Amazon S3 bucket. Inova is an actuarial consultancy company, which means they compile statistical analysis and calculate insurance risks and premiums. What’s Going On?

Data breaches 106

Data breaches Insurance Paper Access 106

IT Governance

OCTOBER 24, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023).

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Krebs on Security

JUNE 4, 2019

said today personal and financial data on some 7.7 That third party — the American Medical Collection Agency (AMCA) — also recently notified competing firm Quest Diagnostics that an intrusion in its payments Web site exposed personal, financial and medical data on nearly 12 million Quest patients. ” ANALYSIS.

Insurance 253

Insurance Data Privacy Access Security 253

Hunton Privacy

NOVEMBER 15, 2023

Patrick Gunning from King & Wood Mallesons reports that, on November 2, 2023, the Australian Information Commissioner filed proceedings in the Federal Court of Australia against Australian Clinical Labs Limited seeking a civil penalty ( i.e. , a fine) in connection with the company’s response to a data breach that occurred in February 2022.

Data breaches 128

Data breaches Privacy Risk Information Security 128

Reltio

JULY 2, 2019

Martin Squires is a leader with extensive experience in customer insight, marketing analytics & data science. Selected for the last 5 years as a member of the Data IQ Data 100 , Martin has considerable experience helping organisations drive value from building a deeper understanding of their customers.

Analytics 58

Analytics Insurance Artificial Intelligence Data science 58

IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Security Affairs

MAY 1, 2023

Bitmarck, one of the largest IT service providers for social insurance carriers in Germany, announced yesterday that it has suffered a cyber attack. The incident impacted statutory health insurance companies that have their IT operated by BITMARCK. The company immediately reported the incident to the responsible authorities.

IT 92

IT Insurance Data breaches Education 92

Info Source

FEBRUARY 20, 2023

Those solutions have evolved from extracting data from strictly from documents, which increasingly arrive in digital formats, to inclusion of other inputs required for a business process. Some vendors have acknowledged the limitation and have started to shift to Intelligent Data Processing.

Marketing 52

Marketing Artificial Intelligence B2B Paper 52

Krebs on Security

JULY 21, 2023

This is actually down from five of the Fortune 100 in 2018, the last time KrebsOnSecurity performed this analysis. “Separation of duties is a fundamental concept of security, whether we’re talking about cyber threats, employee fraud, or physical theft,” said Tari Schreider , an analyst with Datos Insights.

Security 218

Security Risk Insurance Cybersecurity 218

IT Governance

MAY 7, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data scraping is a typically automated process that extracts information from websites, allowing criminals to compile data sets containing personal information.

Data breaches 59

Data breaches Education Manufacturing Retail 59

IT Governance

DECEMBER 5, 2023

Data Breach Dashboard For a quick, one-page overview of this month’s findings, please use our Data Breach Dashboard: Note: From this month, zero-day vulnerabilities are excluded from the ‘unpatched or misconfigured’ category. You’ll also be able to download this in the near future, along with the month’s data (and our sources).

Data breaches 113

Data breaches Ransomware Access Security 113

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. According to CryptoIns analysts, the crypto assets insurance market is expected to reach $7 billion by 2023. Why do crypto exchanges’ users need insurance?

Insurance 68

Insurance Risk Marketing Cybersecurity 68

Data Protection Report

JULY 28, 2021

Germany’s highest civil court, the Federal Court Of Justice ( Bundesgerichtshof , the FCJ ), has just published a decision specifying the scope of data subject access requests (DSARs). The FCJ held that Article 15 of the EU General Data Protection Regulation (GDPR) has a broader scope than previously understood in Germany.

Access 128

Access GDPR Personal data Insurance 128

CGI

SEPTEMBER 12, 2017

Data analytics – how should insurers look to the future? With a plethora of new data sources across the property and casualty (P&C) general insurance lifecycle now becoming available, how do insurers create an all-encompassing data analytics policy for the future? Tue, 09/12/2017 - 03:00.

Insurance 40

Insurance Analytics Risk IoT 40

IT Governance

NOVEMBER 13, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data included shoppers’ names, email addresses, phone numbers, countries of residence and membership numbers.

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

eSecurity Planet

JULY 12, 2022

The first signs of the ransomware attack at data storage vendor Spectra Logic were reports from a number of IT staffers about little things going wrong at the beginning of the day. Cyber Insurer Provides Help. Also read: Top 8 Cyber Insurance Companies for 2022 Best Ransomware Removal and Recovery Services.

Ransomware 144

Ransomware Insurance Cybersecurity Passwords 144

AIIM

DECEMBER 20, 2018

Those who have been practicing Human resource management for years knows the importance of relying on data analytics for creating an enhanced work culture or else they might lag behind that of other departments. With the ever-growing technology advancement, Human Resource professionals have started embracing the future: data analysis.

Big data 124

Big data Analytics Mining Insurance 124

The Last Watchdog

JUNE 2, 2022

Big banks and insurance companies instilled the practice of requesting their third-party vendors to fill out increasingly bloated questionnaires, called bespoke assessments, which they then used as their sole basis for assessing third-party risk. It does this by ingesting and correlating data from a wide array of security-related datasets.

Security 266

Security Risk Digital transformation Insurance 266

Security Affairs

NOVEMBER 8, 2020

A data breach suffered by Luxottica has exposed the personal and health information of patients of LensCrafters, Target Optical, and EyeMed. The exposed financial data includes budgets, marketing forecast analysis, and other sensitive data. Luxottica Group S.p.A.

Data breaches 80

Data breaches Insurance Retail Ransomware 80

Adam Shostack

DECEMBER 2, 2016

Over the decade or so since The New School book came out, there’s been a sea change in how we talk about breaches, and how we talk about those who got breached. And so we should ask what we could do about that. We agree that understanding what’s going wrong should be a bigger part of how we learn.

Insurance 40

Insurance Cybersecurity IT Government 40

erwin

MARCH 30, 2020

Data intelligence has a critical role to play in the supercomputing battle against Covid-19. While leveraging supercomputing power is a tremendous asset in our fight to combat this global pandemic, in order to deliver life-saving insights, you really have to understand what data you have and where it came from.

Metadata 122

Metadata IT Healthcare Government 122

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Financial information, medical data, health reimbursements, postal addresses, telephone numbers and emails are not thought to have been compromised.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. Highlights include, among others, adoption of revised risk-based capital bond factors for life insurers, amendments to SSAP No. NAIC Adopts Revised Risk-Based Capital Bond Factors for Life Insurers.

Insurance 88

Insurance e-Delivery Paper Sales 88

Security Affairs

APRIL 8, 2021

Group-IB , a global threat hunting and adversary-centric cyber intelligence company, discovered that user data of the Swarmshop card shop have been leaked online on March 17, 2021. Group-IB notified the national CERTs in the above-mentioned countries about the breach so they could take the necessary steps to mitigate the threat.

Passwords 106

Passwords Insurance Personal data Sales 106

erwin

APRIL 11, 2019

Keeping up with new data protection regulations can be difficult, and the latest – the General Data Protection Regulation (GDPR) – isn’t the only new data protection regulation organizations should be aware of. A number of high-profile data breaches and scandals have increased public awareness of the issue.

GDPR 100

GDPR e-Discovery Compliance Metadata 100

IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Over 56 million sensitive records leaked by TmaxSoft TmaxSoft, an IT company in South Korea, has exposed 2 TB of data to the Internet via a Kibana dashboard for over two years.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

FEBRUARY 21, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. TB of ASA Electronics data to its leak site The ALPHV/BlackCat ransomware gang is attempting to extort a ransom from ASA Electronics for 2.7 Data breached: 2.7

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

erwin

JULY 2, 2020

Users discuss how they are putting erwin’s data modeling, enterprise architecture, business process modeling, and data intelligences solutions to work. IT Central Station members using erwin solutions are realizing the benefits of enterprise modeling and data intelligence. Data Modeling with erwin Data Modeler.

Metadata 122

Metadata Healthcare Libraries Government 122

eSecurity Planet

OCTOBER 18, 2021

A lawsuit working its way through the courts could have a lot to say about the liabilities facing organizations that have been hit by ransomware attacks – and could have implications for cybersecurity preparation and regulation in general. ” Cyber Insurance No Longer Reliable. “And the war can be multi-pronged.

Ransomware 103

Ransomware Insurance Digital transformation Cybersecurity 103

The Last Watchdog

MAY 10, 2021

But what about trusted allies who unwittingly put your company in harm’s way? So could sharing intelligence about third-party suppliers help? Back in the mid-1990s, big banks and insurance companies came up with something called “bespoke assessments” as the approach for assessing third party vendor risk.

Risk 195

Risk Insurance Access Security 195

Schneier on Security

FEBRUARY 13, 2019

I had not heard about this case before. Zurich Insurance has refused to pay Mondelez International's claim of $100 million in damages from NotPetya. Those turning to cyber insurance to manage their exposure presently face significant uncertainties about its promise. It claims it is an act of war and therefor not covered.

Insurance 84

Insurance Risk Marketing Government 84

Adam Levin

APRIL 10, 2019

A security analysis of 30 major banking and financial apps has shown major security holes and a lax approach to protecting user data. Aite declined to identify the companies behind the apps researched or say whether they had warned the companies about the security holes discovered in their apps.

Retail 74

Retail Security Insurance Encryption 74

IT Governance

NOVEMBER 20, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. For more information about the SEC cyber security disclosure rules, register for our free webinar on 30 November.)

Data Privacy 52

Data Privacy Privacy Data breaches Security 52