IT Governance

JANUARY 4, 2021

We logged 134 security incidents in December, which accounted for 148,354,955 breached records. We’ll have a separate post looking at the year’s data breaches and cyber attacks in more detail, but in the meantime, you can find the full list of December’s incidents below. Data breaches. Cyber attacks. Ransomware. In other news….

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

Security Affairs

NOVEMBER 30, 2020

. “Sources said the county is in the process of paying the $500,000 ransom as it’s insured for such attacks.” “The County of Delaware recently discovered a disruption to portions of its computer network. The incident was disclosed on Monday and now Delaware County has paid a $500,000 ransom. Pierluigi Paganini.

Computer and Electronics 110

Computer and Electronics Ransomware Insurance Encryption 110

IT Governance

OCTOBER 30, 2018

Rather than posting the usual long list of data breaches and cyber attacks, I’ve decided to go down a new route. It’s been the usual mix of data breaches this month, with lots of mistakes being made and lots of ransoms being paid. First, who sends data via a posted USB stick? Social insurance numbers. Treaty card numbers.

Data breaches 110

Data breaches Computer and Electronics Passwords Insurance 110

IT Governance

OCTOBER 30, 2018

Rather than posting the usual long list of data breaches and cyber attacks, I’ve decided to go down a new route. It’s been the usual mix of data breaches this month, with lots of mistakes being made and lots of ransoms being paid. First, who sends data via a posted USB stick? Social insurance numbers. Treaty card numbers.

Data breaches 110

Data breaches Computer and Electronics Passwords Insurance 110

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR. Deceased’s data.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Krebs on Security

JULY 27, 2020

based Dun & Bradstreet [ NYSE:DNB ] is a data analytics company that acts as a kind of de facto credit bureau for companies: When a business owner wants to open a new line of credit, creditors typically check with Dun & Bradstreet to gauge the business’s history and trustworthiness. . Short Hills, N.J.-based

Energy and Utilities 352

Energy and Utilities Computer and Electronics Insurance Risk 352

The Security Ledger

NOVEMBER 6, 2018

In this episode of the podcast, #119: Electronic Frontier Foundation General Counsel Kurt Opsahl joins us to talk about the Coders’ Rights Project. Also: we speak with Senthil Ramakrishnan, a lead member of AT&T’s IoT Security group about that company’s plans to work with Ericsson to certify the security of IoT devices.

IoT 40

IoT Computer and Electronics Security Insurance 40

eDiscovery Daily

APRIL 7, 2019

When I spoke at the University of Florida E-Discovery Conference last month, there was a question from the live stream audience about a lawyer’s duty to disclose a data breach within his or her law firm. Thanks to an article I came across last week, I now know that there was a recent ABA opinion on the topic. No exceptions*.

Data breaches 57

Data breaches Cybersecurity e-Discovery Computer and Electronics 57

IT Governance

MAY 3, 2018

This week, we discuss a new deal between the NHS and Microsoft, the financial cost of Equifax’s massive data breach, and a jail sentence for a hacker who altered prison records. Equifax’s huge data breach, which compromised the personal data of 147.9 Hello and welcome to the IT Governance podcast for Friday, 4 May 2018.

Computer and Electronics 66

Computer and Electronics Insurance Data breaches Information Security 66

ARMA International

FEBRUARY 21, 2020

Those employees joined a growing number of workers in other countries – Belgium, the UK, and Sweden, to name a few – who use microchips for workplace security, convenience, and commuting. Once connected, data can be exchanged, and the body and device can be remotely monitored and controlled.” Benefits and Risks.

Computer and Electronics 105

Computer and Electronics Privacy Artificial Intelligence IoT 105

Hunton Privacy

NOVEMBER 30, 2016

On November 22, 2016, the Department of Health and Human Services (“HHS”) announced a $650,000 settlement with University of Massachusetts Amherst (“UMass”), resulting from alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules. .

Computer and Electronics 40

Computer and Electronics Insurance Privacy Risk 40

eDiscovery Daily

JANUARY 10, 2019

Just as the number of data breaches continues to rise, the number of lawsuits over data breaches continues to rise as well. Chances are that your data has been hacked at some point from at least one company with which you do business. But this lawsuit is unique. million US citizens. million US citizens.

Data breaches 41

Data breaches Cybersecurity Computer and Electronics Insurance 41

Data Matters

DECEMBER 10, 2019

Regulators worldwide, including the Securities and Futures Commission of Hong Kong, have issued guidelines for reducing and mitigating hacking risks. Securities and Exchange Commission (SEC) recently discovered that 26 percent of U.S. Data privacy issues: Cyberattacks often involve identity theft. standard login passwords).

Data breaches 60

Data breaches Insurance Authentication Risk 60

Data Matters

DECEMBER 10, 2019

Regulators worldwide, including the Securities and Futures Commission of Hong Kong, have issued guidelines for reducing and mitigating hacking risks. Securities and Exchange Commission (SEC) recently discovered that 26 percent of U.S. Data privacy issues: Cyberattacks often involve identity theft. standard login passwords).

Data breaches 60

Data breaches Insurance Authentication Risk 60

HIPAA

OCTOBER 16, 2013

The health insurance portability and accountability act has set various guidelines, which should be adhered to by anyone who handles any electronic medical data. Lack of compliance to the HIPAA security standards could lead to large fines and in extreme cases even loss of medical licenses.

Compliance 31

Compliance Computer and Electronics Security Encryption 31

Hunton Privacy

OCTOBER 22, 2018

Anthem”) following Anthem’s 2015 data breach. Three years ago, in February 2015, OCR opened a compliance review of Anthem, the nation’s second largest health insurer, following media reports that Anthem had suffered a significant cyberattack. prevent unauthorized access to ePHI. prevent unauthorized access to ePHI.

Computer and Electronics 63

Computer and Electronics Passwords Data breaches Compliance 63

Data Protection Report

MAY 15, 2019

In a significant recent decision, the Office of the Privacy Commissioner of Canada (OPC) altered the regulatory landscape when moving personal information between affiliated companies and across Canada’s border for data processing or storage purposes. In September 2017, Equifax Inc., s systems for four months.

IT 40

IT Computer and Electronics Cloud Privacy 40

HIPAA

OCTOBER 16, 2013

The health insurance portability and accountability act has set various guidelines, which should be adhered to by anyone who handles any electronic medical data. Lack of compliance to the HIPAA security standards could lead to large fines and in extreme cases even loss of medical licenses.

Compliance 28

Compliance Computer and Electronics Security Encryption 28

HIPAA

OCTOBER 16, 2013

The health insurance portability and accountability act has set various guidelines, which should be adhered to by anyone who handles any electronic medical data. Lack of compliance to the HIPAA security standards could lead to large fines and in extreme cases even loss of medical licenses.

Compliance 28

Compliance Computer and Electronics Security Encryption 28

Data Protection Report

AUGUST 8, 2017

Subsequently, the firm installed key logger software on its employees’ computers. When reviewing the files created by the software, the employer became aware that an employee had used his work computer for private purposes during working hours and, thereupon, terminated the employment relationship.

Computer and Electronics 40

Computer and Electronics Insurance Privacy GDPR 40

Hunton Privacy

JULY 10, 2014

In addition, the definition of “personal information” now includes a “username or e-mail address, in combination with a password or security question and answer that would permit access to an online account.”. steps that have been taken to rectify the breach.

Computer and Electronics 40

Computer and Electronics Insurance Passwords Access 40

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Mister Chairman and Members of the Committee, thank you for the opportunity to testify today concerning the security of credit data. My name is Bruce Schneier, and I am a security technologist. Before the. Committee on Energy and Commerce.

Personal data 82

Personal data Computer and Electronics Privacy Data breaches 82

CGI

MAY 13, 2018

When I was at university earning my Masters in Computer Science, I devoted a lot of my coursework to distributed computing. However, blockchain requires organizations to think about their data not as an asset they own, but as a shared resource—a shift in mindset that is not easy for everyone. ACT-IAC guidance. It is shared.

Blockchain 40

Blockchain Government Computer and Electronics Mining 40

ARMA International

APRIL 28, 2022

I have overseen two significant projects: an electronic discovery production and disaster response and recovery effort. Covering all computers and file cabinets in plastic sheeting. . The plan was to meet the insurance coordinator at the Howard Avenue office at 8:30 a.m. The insurance coordinator proposed stabilizing in place.

Records Management 97

Records Management Archiving Insurance Communications 97

Hunton Privacy

OCTOBER 9, 2013

On October 2, 2013, the 86th Conference of the German Data Protection Commissioners concluded in Bremen. securing electronic communications by implementing and developing end-to-end encryption. The DPAs request further development of the data protection framework at the national and international level.

Computer and Electronics 40

Computer and Electronics Encryption Communications Insurance 40

IT Governance

MARCH 5, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 183,754,481 records. EasyPark data breach: 21.1 million data records belonging to EasyPark have been listed for sale on a hacking forum.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 27, 2019

A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Part one covers January to June, and will be followed by part in the coming days.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Krebs on Security

JULY 24, 2018

Now the financial institution is suing its insurance provider for refusing to fully cover the losses. That second computer had the ability to manage National Bank customer accounts and their use of ATMs and bank cards. In June of 2016, National Bank implemented additional security protocols, as recommended by FirstData.

Insurance 186

Insurance Computer and Electronics Phishing Access 186

Krebs on Security

DECEMBER 29, 2022

Until recently, I was fairly active on Twitter , regularly tweeting to more than 350,000 followers about important security news and stories here. Facing a backlash from lawmakers and the public, the IRS soon reverses course , saying video selfies will be optional and that any biometric data collected will be destroyed after verification.

Passwords 220

Passwords Ransomware Computer and Electronics Encryption 220

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is more than mere credentials, too – according to Cybernews, most of the exposed data is sensitive. In total, 3,876 domain names were included in the exposed data set.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eDiscovery Daily

JANUARY 9, 2018

Today, let’s take a look back at cases related to possession, custody and control, subpoena of cloud provider data, waiver of privilege and the first part of the cases relating to sanctions and spoliation. Just because you don’t physically have your hands on the data doesn’t mean you’re not responsible for it. Wilkinson, Jr.

e-Discovery 39

e-Discovery Computer and Electronics Communications Cloud 39

Data Protector

OCTOBER 11, 2017

What follows below is an edited version of the debate in the House of Lords of the Second Reading of the Data Protection Bill, held on 10 October. Data is not just a resource for better marketing, better service and delivery. Data is used to build products themselves. It has become a cliché that data is the new oil.

GDPR 120

GDPR Personal data Government IT 120

ForAllSecure

NOVEMBER 9, 2022

Often the tiny flashing light on the dashboard also alerts would-be criminals that the car is protected by the latest form of anti theft security. A sophisticated set of encryption and electronics is at work inside the vehicle. Just because it has all the bells and whistles doesn’t necessarily mean it’s secure.

Computer and Electronics 40

Computer and Electronics Manufacturing Encryption Communications 40

eSecurity Planet

OCTOBER 5, 2021

But even when passwords are secure, it’s not enough. Initially, security vendors only offered two-factor authentication. Since then, security vendors have introduced new methods for authentication, which can be layered to create a multi-factor authentication solution. This post has been updated for 2021. Something you have.

Authentication 94

Authentication Passwords Access Computer and Electronics 94

eSecurity Planet

AUGUST 13, 2021

For everything from minor network infractions to devastating cyberattacks and data privacy troubles , digital forensics software can help clean up the mess and get to the root of what happened. The Sleuth Kit enables administrators to analyze file system data via a library of command-line tools for investing disk images.

e-Discovery 134

e-Discovery Computer and Electronics Marketing Compliance 134

ARMA International

SEPTEMBER 27, 2021

Some technology trends such as real-time data analytics are ongoing, while others are more recent, such as blockchain. This means imagining the “art of the possible” for a new future using a cloud computer model to deliver transformative change. Cloud-first “Mind-shift”. 2020, p 6).

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54