IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Source (New) Retail Italy Yes 436,932 Toner-dumping.de TB Paysign, Inc.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Security Affairs

JANUARY 19, 2024

VF immediately began taking measures to remediate the attack and launched an investigation into the security breach. “Based on VF’s preliminary analysis from its ongoing investigation, VF currently estimates that the threat actor stole personal data of approximately 35.5 million individual consumers.”

Data breaches 106

Data breaches Passwords Retail Insurance 106

eSecurity Planet

JANUARY 5, 2023

After a year that saw massive ransomware attacks and open cyber warfare, the biggest question in cybersecurity for 2023 will likely be how much of those attack techniques get commoditized and weaponized. 2023, he predicted, “will not be any easier when it comes to keeping users’ data safe and private.” Trade Cyberthreats.

Security 145

Security Ransomware Cybersecurity Privacy 145

Privacy and Cybersecurity Law

JULY 26, 2021

On July 5, 2021, the Italian supervisory authority (“ Garante ”) published an injunction against a company operating a food delivery app (“ Company ”) over the processing of riders’ personal data with respect to the use of algorithms for the management of the orders. Security measures in place. Retention period.

Personal data 52

Personal data GDPR e-Delivery Communications 52

IT Governance

MARCH 5, 2024

Known data breached Pure Incubation Ventures Source (New) Professional services USA Yes 183,754,481 EasyPark Source 1 ; source 2 ; source 3 (Update) Software Sweden Yes 21,100,000 Cutout.Pro Source (New) Software Hong Kong Yes 19,972,829 Optum Source 1 ; source 2 (New) Healthcare USA Yes 6 TB Kumagai Gumi Group Co.,

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 19, 2023

An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November. The data belonged to nearly 7 million individuals.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Hunton Privacy

JANUARY 12, 2018

On January 8, 2017, the UK Information Commissioner (“ICO”) issued an unprecedented monetary penalty of £400,000 against British mobile phone retailer, The Car Phone Warehouse Limited. In its decision, the ICO meticulously detailed the chronology of events and technical failures that led to the breach.

Retail 40

Retail Personal data Security GDPR 40

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Data breached: >33,000,000 people’s data. Data breached: 19,718,687 records.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Security Affairs

MAY 20, 2023

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Exposed data includes customer names, emails, phone numbers, addresses, and dates of birth.

Data breaches 85

Data breaches Retail Sales Ransomware 85

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 79

Data Privacy Privacy GDPR Personal data 79

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches.

Security 132

Security Data breaches Ransomware Military 132

CGI

DECEMBER 20, 2018

From channel to customer: How an omni-channel experience is the key to the retail industry’s success. Is the hype around the retail store being dead simply that, hype? Retailers are making a decided shift in focus from channel to customer , led by the growing demand for seamless and personalized customer experiences.

Retail 40

Retail Customer Experience Consumer Services Personal data 40

IT Governance

NOVEMBER 7, 2022

Welcome to our November 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. This month, we look at an unintended cyber security problem arising from Twitter’s plan to charge people for verification status.

Phishing 119

Phishing Retail Data breaches Insurance 119

Security Affairs

JUNE 5, 2023

The BBC and British Airways were both impacted by the data breach suffered by the payroll provider Zellis. As a result of the cyber attack on the payroll provider Zellis, the personal data of employees at the BBC and British Airways has been compromised and exposed. and the Republic of Ireland.

Data breaches 72

Data breaches Retail Cybersecurity Personal data 72

Hunton Privacy

MARCH 8, 2017

The new team brings together the firm’s renowned capabilities in privacy and cybersecurity with its recognized strength in M&A transactions. Lisa Sotto , head of the firm’s Global Privacy and Cybersecurity practice, adds: “Personal data is a critical asset that should always be addressed as a key deal point.”.

Privacy 45

Privacy Security Retail Personal data 45

Hunton Privacy

AUGUST 6, 2021

On July 30, 2021, the UK High Court handed down its judgment in the case of Warren v DSG Retail Ltd [2021] EWHC 2168 (QB), determining that the claimant could not seek damages on the basis of misuse of personal information, breach of confidence or common law negligence following a data breach. That fine is under appeal.

Data breaches 116

Data breaches Retail Sales Personal data 116

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 76

GDPR Compliance Personal data Privacy 76

Thales Cloud Protection & Licensing

OCTOBER 10, 2018

I now see cyber security – and more specifically, data security – positioned at the edge of a similar tipping point. Driven by the introduction of the General Data Protection Regulation (GDPR) and heightened by constantly evolving demands, consumers are changing their purchasing habits. A personal interest.

GDPR 76

GDPR Security Marketing Data breaches 76

Security Affairs

JANUARY 9, 2019

million settlement with The Neiman Marcus Group LLC over a data breach suffered by the company in 2013 and disclosed earlier 2014. Early 2014, the high-end retailer confirmed a data breach, the incident happened a few weeks after the clamorous data breach at US giant retailer Target. billion in the Q4 2013.

Data breaches 57

Data breaches Retail Sales Personal data 57

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 The ICO has also indicated an intention to take action on cybersecurity breaches using the fining powers now available to it under the UK General Data Protection Regulation ( UK GDPR ).

GDPR 78

GDPR Risk Cybersecurity Compliance 78

Hunton Privacy

OCTOBER 19, 2022

On October 12, 2022, New York Attorney General Letitia James announced that her office had secured a $1.9 million penalty from e-commerce retailer Zoetop, owner of SHEIN and ROMWE, following an improperly handled data breach. In addition to paying New York $1.9

Data breaches 64

Data breaches Passwords Retail Cybersecurity 64

Thales Cloud Protection & Licensing

MARCH 10, 2021

What’s driving the security of IoT? The Urgency for Security in a Connected World. Connectivity enables powerful, revenue-generating capabilities…from data telemetry and runtime analytics, to effectively predicting and maintenance requirements. Device Security is Hard. Guest Blog: TalkingTrust. Thu, 03/11/2021 - 07:39.

IoT 78

IoT Security Manufacturing Encryption 78

IT Governance

JUNE 1, 2023

On this page, you will find all our usual information breaking down the month’s security incidents. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. However, we’ve decided to consolidate our records onto a single page.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

Hunton Privacy

OCTOBER 17, 2014

On October 17, 2014, the White House announced that the President signed a new executive order focused on cybersecurity. The signed executive order, entitled Improving the Security of Consumer Financial Transactions (the “Order”), is focused on securing consumer transactions and sensitive personal data handled by the U.S.

Security 40

Security Cybersecurity Personal data Retail 40

IBM Big Data Hub

MAY 3, 2024

The business buys, sells, or shares the personal data of 100,000+ California residents. The business makes at least half of its total annual revenue from selling the data of California residents. Behavioral advertising is the act of using someone’s personal data to display targeted ads to them.

Artificial Intelligence 66

Artificial Intelligence Compliance Privacy Risk 66

Thales Cloud Protection & Licensing

JUNE 21, 2023

There are several key features CBDC has to implement and Thales can help with a few: Security, Offline CBDC and digital ID wallets. When digital cash sits on a secure device, the loss, theft or mistreatment of that device means that real cash is lost. Bridges need to be built for resilience and for security reasons.

Retail 62

Retail Encryption e-Discovery Data Privacy 62

Thales Cloud Protection & Licensing

AUGUST 7, 2018

August is two-thirds of the way through year, and we have already seen a number of serious, far-reaching data breaches making headlines, some occurred in 2018, and some from 2017 that are now being disclosed. This underscores the harsh realities of the state of cybersecurity today. The good news? You can also find me at @CindyProvin.

Data breaches 63

Data breaches Retail IT Communications 63

Security Affairs

OCTOBER 20, 2020

Powered with Group-IB’s solution for online fraud prevention Secure Portal , the platform has managed to fight off over 220,000 requests from web-bots in just two months, shielding its 4.5 But it was the detection and prevention of bad bot activity that pushed Paxful to adopt an additional layer of cybersecurity and resort to Group-IB.

IT 57

IT Cybersecurity Retail Security 57

The Last Watchdog

OCTOBER 16, 2019

The sophistication level of these cyberthreats is increasing, and there’s an ominous consensus gelling in the cybersecurity community that the worst is yet to come. It’s hard to see a short-term change that would slow attempts by attackers,” Patrick Sullivan, Akamai’s senior director of security strategy, told me. Talk more soon.

Big data 164

Big data Passwords Digital transformation Data breaches 164

eSecurity Planet

FEBRUARY 11, 2022

Most essentially, facial recognition technology promises a solid amount of internal and external security advantages in the day-to-day activity of enterprises, making it a key technology for passwordless authentication. Another concern is that of false negatives in identification, which can deny the right person access.

Authentication 122

Authentication Artificial Intelligence Access Passwords 122

Thales Cloud Protection & Licensing

NOVEMBER 30, 2021

During the Thales Trusted Access Summit 2021, I discussed how advances in identity proofing such as biometrics and smartphone technologies are enabling organizations to deliver KYC effectively by offering a quick, frictionless, and secure identity proofing environment. Registration and medical data access in healthcare.

Authentication 71

Authentication Privacy Compliance Retail 71

IT Governance

SEPTEMBER 27, 2018

There were also a few more reported ransomware incidents than normal, some of which saw the victims paying the fine – something most security professionals advise against. The list tells me one thing: organisations need to get themselves ready for a data breach. Data Breach. Perth Mint data breach bigger than thought.

Data breaches 111

Data breaches Passwords Ransomware Phishing 111

DLA Piper Privacy Matters

JANUARY 28, 2022

In Asia Pacific, China ’s Personal Information Protection Law (PIPL) came into force. This consolidates obligations on processing of personal information at a national law level, but still leaves to be determined in the future through subsequent regulations and guidelines. This is nearly a sevenfold increase on last year’s total.

GDPR 98

GDPR Privacy Data breaches Personal data 98

The Last Watchdog

SEPTEMBER 20, 2019

Current attack trends add urgency, and catching up on doing basic security best practices isn’t enough. Eventually, governments will address the risk by beefing up security and purchasing cyber insurance, which go hand in glove. There are some big, unanswered questions about supply chain security surrounding voting machines.

Ransomware 153

Ransomware Government Retail Security 153

Krebs on Security

SEPTEMBER 10, 2018

A credit freeze — also known as a “security freeze” — restricts access to your credit file, making it far more difficult for identity thieves to open new accounts in your name. For example, how do companies that provide background screening and credit report data to landlords decide who can sign up as a landlord?

Access 228

Access Military Retail Security 228

DLA Piper Privacy Matters

MARCH 21, 2019

At the beginning of February, the Bavarian Data Protection Authority (DPA) participated in the Safer Internet Day (SID) 2019 and searched 40 websites of large companies based in Bavaria. Fine imposed on Google by French Data Protection Authority (CNIL).

GDPR 49

GDPR Personal data Risk Retail 49

Privacy and Cybersecurity Law

MARCH 6, 2018

To mitigate against this threat, the IRS recommended that taxpayers and businesses that store taxpayer information take three steps: Use Security Software. Use security software with firewall and anti-virus protections, and ensure the security software is always turned on and can automatically update. Protect Personal Data.

Encryption 40

Encryption Cybersecurity Retail Personal data 40