Remove 11
Remove 2023 Remove Cybersecurity Remove Insurance Remove IT
article thumbnail

A Cyber Insurance Backstop

Schneier on Security

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. 11, 2001, terrorist attacks. The 9/11 attacks cost insurers and reinsurers $47 billion.

article thumbnail

Highlights from the New U.S. Cybersecurity Strategy

Krebs on Security

The Biden administration today issued its vision for beefing up the nation’s collective cybersecurity posture, including calls for legislation establishing liability for software products and services that are sold with little regard for security. ” The strategy anticipates the U.S.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Week in Cyber Security and Data Privacy: 16–22 October 2023

IT Governance

Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023). International Criminal Court says cyberattack was attempted espionage Date of breach: 19 September 2023 ( update on 20 October 2023).

article thumbnail

The Week in Cyber Security and Data Privacy: 11 – 18 December 2023

IT Governance

When the Russian Cl0p gang exploited a zero-day SQL injection vulnerability in MOVEit Transfer in May 2023, Delta Dental was one of hundreds of organisations whose data was compromised. According to its breach notification , Mr. Cooper detected suspicious activity on its network on 31 October. GB Goa Natural Gas Pvt.Ltd.

article thumbnail

The Week in Cyber Security and Data Privacy: 13 – 19 November 2023

IT Governance

Date of breach: 26 October 2023 Breached organisation: Homeland, Inc., However, in a very unusual move, ALPHV has also reported its victim to the US SEC (Securities and Exchange Commission) for failing to comply with the new SEC cybersecurity disclosure rules – even though the rules in question do not come into force until December. (

article thumbnail

The State of Maine disclosed a data breach that impacted 1.3M people

Security Affairs

Threat actors exploited the zero-day vulnerability CVE-2023-34362 to hack the file transfer platform and steal the data of the organization. Threat actors exploited the zero-day vulnerability CVE-2023-34362 to hack the file transfer platform and steal the data of the organization. million individuals.

article thumbnail

The Week in Cyber Security and Data Privacy: 23–29 October 2023

IT Governance

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). Reeds Spring district alerts families to cybersecurity data breach Date of breach: 26 April 2023 (reported 26 October 2023).