Krebs on Security

APRIL 27, 2023

The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to access records that should only be available after logging in. A researcher found DC Health had five Salesforce Community sites exposing data. Unfortunately, I did not receive any responses from government organizations.”

Access 284

Access Authentication Information Security Communications 284

IT Governance

AUGUST 25, 2022

Lloyd’s of London has announced that its insurance policies will no longer cover losses resulting from certain nation-state cyber attacks or acts of war. In a memo sent to the organisation’s insurance syndicates , Underwriting Director Tony Chaudhry said that Lloyd’s remains “strongly supportive” of policies that cover cyber attacks.

Insurance 105

Insurance IT Government Risk 105

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today. The user can accept or reject each use of their data individually.

Data Privacy 83

Data Privacy Privacy GDPR Personal data 83

Collibra

APRIL 9, 2021

Recapping a discussion moderated by Stijn Christiaens and featuring insurance data experts from Deloitte UK . Insurance is a data-intensive business. Insurance companies need data to better assess risks and price policies competitively, but also profitably. Data governance holds key to cloud migration.

Insurance 59

Insurance Cloud Data science Analytics 59

Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. The post Kentucky and Maryland Recently Joined Other States in Adopting NAIC Model Data Security Law.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Rocket Software

MARCH 14, 2022

Analyst firm IDC recently published a Vendor Spotlight report featuring ASG Mobius Content Services (Mobius) and its applications in the financial service and insurance industries. IDP Trends in the Financial and Insurance Industries. Challenges to Effective IDP.

Financial Services 82

Financial Services Insurance Digital transformation Paper 82

IT Governance

NOVEMBER 3, 2023

IT Governance’s research has discovered the following for October 2023: 114 publicly disclosed security incidents. Introducing our Data Breach Dashboard We’re excited to introduce our new monthly Data Breach Dashboard – a one-page overview of this month’s key findings that you can download for free.

Data breaches 87

Data breaches Insurance Ransomware Education 87

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

IT Governance

JANUARY 5, 2024

For instance, a two-month Europol action (revealed to the public on 22 December) discovered that 443 organisations had suffered data breaches – specifically, their customers’ payment card data had been compromised. This blog provides analysis of the data we’ve collected. We log this as 41 incidents.

Data breaches 97

Data breaches Insurance Manufacturing Ransomware 97

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Data Matters

FEBRUARY 25, 2022

Sidley and OneTrust DataGuidance are pleased to announce that registration is now open for their annual Data Protection in Financial Services (DPFS) Week. Join us from February 28 – March 3 for DPFS Week 2022 , a series of webinars looking at the impacts of data privacy across the financial sector. Sina Kian, VP of Strategy, Aleo.

Financial Services 103

Financial Services Privacy Data Privacy Cybersecurity 103

IT Governance

OCTOBER 24, 2023

Welcome to a new series of weekly blog posts rounding up the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Records breached: Unknown, but sensitive personal data was probably breached.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

IT Governance

NOVEMBER 1, 2022

Welcome to our October 2022 review of data breaches and cyber attacks. By contrast, comparatively little personal data was breached, with our figures confirming that at least 9,990,855 records were compromised. For now, it’s unclear what damage the data could cause if exposed, so we’ve omitted the figure from our tally.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. With the ever-present danger of data breaches and cyber attacks, organisations must be sure that they have the financial backing to respond appropriately. The most common reasons that insurers reject cyber insurance claims are organisations’ failure to. Protect data in transit.

Insurance 89

Insurance Data breaches Risk Information Security 89

IT Governance

AUGUST 3, 2020

After mammoth amounts of personal data were leaked in May and June, we’ve seen a reversion to the mean this month. You can find our full list of publicly disclosed data breaches from July in this blog. Meanwhile, you can stay up to date with the latest news by subscribing to our Weekly Round-up or visiting our blog.

Data breaches 141

Data breaches Insurance Ransomware Personal data 141

IT Governance

JUNE 1, 2023

IT Governance found 98 publicly disclosed security incidents in May 2023, accounting for 98,226,877 breached records. You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. million) Apria Healthcare suffers security breach (1.8

Data breaches 98

Data breaches Ransomware Insurance Personal data 98

IT Governance

JULY 4, 2023

IT Governance found 79 publicly disclosed security incidents in June 2023, accounting for 14,353,113 breached records. You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents.

Data breaches 96

Data breaches Ransomware Government Insurance 96

IT Governance

MARCH 31, 2022

Be sure to check our blog to find that article, or subscribe to our Weekly Round-up to make sure you get the latest content delivered straight to your inbox. Meanwhile, you can find the full list of cyber attacks and data breaches for March 2022 below. Data breaches. Cyber attacks. Ransomware. Financial information.

Data breaches 111

Data breaches Ransomware Insurance Government 111

IT Governance

AUGUST 1, 2022

Welcome to our July 2022 review of data breaches and cyber attacks. Data breaches. We identified 85 security incidents during the month, resulting in 99,243,757 compromised records. You can find the full list below, broken into categories. Cyber attacks. Ransomware. Financial information. Malicious insiders and miscellaneous incidents.

Data breaches 119

Data breaches Ransomware Insurance Access 119

IT Governance

DECEMBER 1, 2022

Welcome to our November 2022 review of data breaches and cyber attacks. The first was a data breach at Twitter, in the latest PR disaster for the social media giant. The second was a cyber attack on the Russian scooter-sharing service Whoosh, which was discovered after customers’ data was put up for sale on the dark web.

Data breaches 115

Data breaches Ransomware Personal data Insurance 115

IT Governance

JANUARY 3, 2023

December can be the best or worst time to suffer a data breach. On the one hand, people have started to wind down to the end of the year, all attention is on holidays and a data breach is more likely to fall under the data. But for the very same reasons, a December data breach can be the worst possible scenario.

Data breaches 115

Data breaches Ransomware e-Discovery Insurance 115

IT Governance

DECEMBER 14, 2021

Organisations such as IT Governance that offer cyber security as a service assign dedicated experts to oversee the organisation’s data protection and data privacy needs. In this blog, we look at three other ways that cyber security as a service can benefit your organisation, and help you understand how the process works.

Security 131

Security Insurance Data breaches Information Security 131

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 The compromised data allegedly includes names, email addresses and phone numbers.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

IT Governance

MARCH 1, 2023

Welcome to our February 2023 list of data breaches and cyber attacks. It follows a mammoth start to the year, with more than 277 million breached records in January , and brings the running total for the year to over 300 million pieces of compromised personal data. You can find the full list of data breaches and cyber attacks below.

Data breaches 130

Data breaches Ransomware e-Delivery Government 130

Lenny Zeltser

JULY 1, 2020

the scammers get these details from massive data breaches, such as the Equifax breach. The most likely way in which you’ll learn that you’ve fallen victim to the identity theft-based unemployment insurance scam is by receiving an unsolicited debit card in the mail. I believe in this scheme.

Insurance 116

Insurance Data breaches Government IT 116

IT Governance

SEPTEMBER 1, 2021

It has been another month of comparatively few reported cyber attacks and data breaches, with our August list containing 84 incidents accounting for 60,865,828 breached records. You can that incident, along with our full list of cyber attacks and data breaches, below – with those affecting UK organisations listed in bold. Ransomware.

Data breaches 140

Data breaches Ransomware Insurance Data migration 140

IT Governance

JUNE 30, 2022

Welcome to our June 2022 review of data breaches and cyber attacks. Data breaches. We identified 80 security incidents during the month, resulting in 34,908,053 compromised records. You can find the full list below, broken down into categories. Cyber attacks. Ransomware. Financial information. In other news…. Cyber attacks.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

IT Governance

DECEMBER 5, 2023

Data Breach Dashboard For a quick, one-page overview of this month’s findings, please use our Data Breach Dashboard: Note: From this month, zero-day vulnerabilities are excluded from the ‘unpatched or misconfigured’ category. You’ll also be able to download this in the near future, along with the month’s data (and our sources).

Data breaches 113

Data breaches Ransomware Access Security 113

IT Governance

JUNE 1, 2022

Welcome to our May 2022 review of data breaches and cyber attacks. Data breaches. We identified 77 security incidents during the month, resulting in 49,782,129 compromised records. You can find the full list below, with incidents affecting UK organisations listed in bold. Cyber attacks. Ransomware. Financial information. Cyber attacks.

Data breaches 126

Data breaches Ransomware Phishing Education 126

IT Governance

NOVEMBER 13, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data included shoppers’ names, email addresses, phone numbers, countries of residence and membership numbers.

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

IT Governance

MARCH 20, 2024

Possible reasons for this trend change Reasons for organisations deprioritising security may include: Rising costs and economic uncertainty; Geopolitical tensions and uncertainty; and Fewer UK businesses identifying attacks or breaches, according to government data. % This is a false economy. Our research found 8.2

Security 116

Security Data breaches Government Insurance 116

IT Governance

MARCH 2, 2020

If you’re interested in detailed breakdowns of these incidents, why not subscribe to our Weekly Round-up or visit our blog , where we have a dedicated series on phishing scams ? Ordinance Survey discovers breach of employee data (1,000). South Carolina-based United Health notifies patients of 2019 data breach (36). Ransomware.

Data breaches 145

Data breaches Ransomware Phishing Personal data 145

erwin

APRIL 11, 2019

Keeping up with new data protection regulations can be difficult, and the latest – the General Data Protection Regulation (GDPR) – isn’t the only new data protection regulation organizations should be aware of. A number of high-profile data breaches and scandals have increased public awareness of the issue.

GDPR 100

GDPR e-Discovery Compliance Metadata 100

IT Governance

NOVEMBER 20, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. have notified 330,000 people that their personal data might have been compromised as part of the MOVEit Transfer data breach.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IT Governance

SEPTEMBER 1, 2022

In a month that saw the former US president accused of misappropriating classified government documents, there were also a spate of malicious insiders compromising their employer’s systems. Data breaches. victim of a cyber attack (unknown) Berkshire Partners LLC announces data breach (unknown) United HealthCare Services, Inc.

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116