eSecurity Planet

AUGUST 9, 2022

GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. Healthcare Data Privacy Laws. Health data and patient data in the U.S. See the Best Cybersecurity Awareness Training for Employees. In the U.S.,

Data Privacy 142

Data Privacy Compliance Privacy Security 142

eDiscovery Daily

APRIL 7, 2019

When I spoke at the University of Florida E-Discovery Conference last month, there was a question from the live stream audience about a lawyer’s duty to disclose a data breach within his or her law firm. Janik’s article covers stopping the breach, restoring systems and determination what happened and the cause.

Data breaches 57

Data breaches Cybersecurity e-Discovery Computer and Electronics 57

Armstrong Archives

DECEMBER 19, 2023

Secure document disposal , as part of this comprehensive policy, protects against data breaches and maintains confidentiality, which is vital in today’s digital landscape. Training Staff on Record Retention Policy Employees at all levels should understand the importance of adhering to the company’s record retention policy.

Compliance 52

Compliance Archiving Digital transformation Sales 52

IT Governance

JUNE 1, 2023

Welcome to our new-look list of data breaches and cyber attacks. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. Our research found 98 security incidents during the month, accounting for 98,226,877 breached records.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

KnowBe4

DECEMBER 6, 2022

Live Demo] Ridiculously Easy Security Awareness Training and Phishing. Old-school awareness training does not hack it anymore. Join us TOMORROW, Wednesday, December 7 @ 2:00 PM (ET) , for a live demo of how KnowBe4 introduces a new-school approach to security awareness training and simulated phishing. Did You Know? Save My Spot!

Security awareness 88

Security awareness Phishing Risk Insurance 88

Data Matters

APRIL 20, 2021

This development indicates that sponsors and fiduciaries may soon be subject to focused scrutiny over their cybersecurity practices in DOL investigations and adds to the multiple existing sources of cybersecurity legal risk in the wake of data breaches or insufficient cybersecurity controls.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

Hunton Privacy

JUNE 7, 2012

On May 24, 2012, Massachusetts Attorney General Martha Coakley announced that South Shore Hospital agreed to a consent judgment and $750,000 payment to settle a lawsuit stemming from a data breach that occurred in February 2010.

Data breaches 40

Data breaches Privacy Insurance Education 40

IT Governance

JULY 5, 2022

Last month, the world’s largest NFT (non-fungible token) marketplace, OpenSea, disclosed a data breach in which users’ email addresses were compromised. It added: “We are working with local law enforcement, GEMA, GBI, and insurance officials to recover the funds. NFT marketplace warns users of phishing scams.

Phishing 116

Phishing e-Delivery Retail Insurance 116

Thales Cloud Protection & Licensing

JUNE 15, 2023

Improved key management practices: With KMaaS, organizations can ensure that their keys are managed according to industry best practices, which helps minimize the risk of data breaches. Managing the encryption keys securely, KMaaS can help protect encryption and prevent unauthorized access to sensitive data.

Encryption 134

Encryption Compliance Cloud Authentication 134

KnowBe4

MAY 29, 2019

According to the 2019 Verizon Data Breach Investigations Report , ransomware persisted as the second-most common type of malware reported, accounting for nearly 24% of incidents where malicious code was used. Think of it in terms of training a dog. Plus, industry data suggests that paying doesn’t work, anyway.

Ransomware 40

Ransomware Security awareness Insurance Cybersecurity 40

IT Governance

JANUARY 30, 2019

Data protection under the GDPR looks like this: there are data subjects (that’s individuals like you and me), and we own our own personal data. Vital interests : for example, when processing data will protect someone’s physical integrity or life (either the data subject’s or someone else’s).

GDPR 86

GDPR Compliance Personal data Data breaches 86

DLA Piper Privacy Matters

OCTOBER 25, 2022

The databases also held special category personal data including ethnic origin; religion; details of disabilities; sexual orientation, and health information relevant to ill-heath retirement applications. Employee training remains a key consideration for the ICO in the context of post incident enforcement.

Security 52

Security GDPR Personal data Insurance 52

Data Matters

SEPTEMBER 24, 2019

Under the BDPA, processing shall be lawful where the data subject has given consent to the processing of his personal data for specific purposes, where necessary for, among other purposes, the performance of a contract; to comply with legal obligations; to protect the vital interests of the data subject; and for the administration of justice.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

DLA Piper Privacy Matters

APRIL 23, 2020

These are defined as “decisions that result in the provision or denial of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities such as food and water, or that impact civil rights of individuals.”

Privacy 52

Privacy Government Insurance IT 52

KnowBe4

APRIL 25, 2023

Once those bots—or agents—are trained, and autonomous enough to work on their own, that would be an important step in the direction of a world where AI-driven systems are able to be used for both good and bad. Get a look at THREE NEW FEATURES and see how easy it is to train and phish your users. Did you know? Did you know?

Insurance 71

Insurance Security awareness Phishing Ransomware 71

IT Governance

MARCH 5, 2024

252,796,762 known records breached in 126 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

DLA Piper Privacy Matters

APRIL 2, 2020

The Bureau writes that cyber threat actors are seeking “to profit from a sudden growth in teleworking, increased use of virtual education systems for online classes, a surge in online shopping, public appetite for information related to the pandemic, and the criticality of maintaining functioning critical infrastructure networks.”.

Cybersecurity 52

Cybersecurity Phishing Authentication Access 52

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

KnowBe4

JUNE 20, 2023

1 Root Cause of Data Breaches Verizon's DBIR always has a lot of information to unpack, so I'll continue my review by covering how stolen credentials play a role in attacks. So, what does the report say about the most common threat actions that are involved in data breaches? Train them not to fall for bogus job offers.

Data breaches 74

Data breaches Phishing Security awareness Ransomware 74

eSecurity Planet

JANUARY 21, 2021

LogicManager’s GRC solution has specific use cases across financial services, education, government, healthcare, retail, and technology industries, among others. Like other competitive GRC solutions, it speeds the process of aggregating and mining data, building reports, and managing files. Insurance & claims management.

Compliance 67

Compliance Risk Government Retail 67

eSecurity Planet

JANUARY 21, 2021

LogicManager’s GRC solution has specific use cases across financial services, education, government, healthcare, retail, and technology industries, among others. Like other competitive GRC solutions, it speeds the process of aggregating and mining data, building reports, and managing files. Insurance & claims management.

Compliance 57

Compliance Risk Government Retail 57

IT Governance

NOVEMBER 7, 2022

Welcome to our November 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Elsewhere, we assess data breaches at a cancer research facility and the US retailer Bed Bath & Beyond.

Phishing 119

Phishing Retail Data breaches Insurance 119

IT Governance

JANUARY 16, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is no longer publicly available. Data breached: >223,000,000 records. Data breached: >7,000,000 records. Data breached: 5,500,000 records.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is more than mere credentials, too – according to Cybernews, most of the exposed data is sensitive. Data breached: more than 26 billion records.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

DECEMBER 7, 2023

Compliance Many compliance standards require some form of encryption for data at rest and many also specify requirements for the transmission of data. For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information.

Encryption 101

Encryption IT Passwords IoT 101

KnowBe4

APRIL 11, 2023

We already know that 10% of threats get past security solutions, so we're left with educating the user to stop attacks. Despite 71% of the survey respondents stating they had security awareness training in place, 40% do not conduct regular training, 16% only perform ad hoc training, and 9% only push training when an incident occurs.

Passwords 77

Passwords Phishing Ransomware Security awareness 77

IT Governance

SEPTEMBER 6, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. For more details about the year’s incidents, check out our new page, which provides a complete list of known data breaches and cyber attacks in 2023.

Data breaches 104

Data breaches Ransomware Insurance Privacy 104

IBM Big Data Hub

APRIL 4, 2024

The popularity of private cloud is growing, primarily driven by the need for greater data security. Across industries like education, retail and government, organizations are choosing private cloud settings to conduct business use cases involving workloads with sensitive information and to comply with data privacy and compliance needs.

Cloud 103

Cloud Digital transformation Access Compliance 103

Hunton Privacy

NOVEMBER 25, 2014

On November 21, 2014, Massachusetts Attorney General Martha Coakley announced that Boston hospital Beth Israel Deaconess Medical Center (“BIDMC”) has agreed to pay a total of $100,000 to settle charges related to a data breach that affected the personal and protected health information of nearly 4,000 patients and employees.

Security 40

Security Insurance Data breaches Education 40

IT Governance

APRIL 29, 2024

5,255,944,117 known records breached in 128 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Data Matters

APRIL 23, 2018

Board-management discussions about cyber risk should include identification of which risks to avoid, which to accept, and which to mitigate or transfer through insurance, as well as specific plans associated with each approach. Principle 5. Indeed, given that U.S.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches.

Cybersecurity 94

Cybersecurity Ransomware Passwords Cloud 94

ARMA International

SEPTEMBER 27, 2021

Archival services imply long-term storage of content such as pension records, life insurance policies, real-estate transactions, magazines, and much more. However, DT related to developing new processes and training to use auto-classification tools in the cloud might face resistance from the business users. Knight, F.H.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54

KnowBe4

MAY 2, 2023

In the near term, new-school security awareness training can help alert your people to the tells of automated scamming. And in the longer term, that training will adapt and keep pace with the threat as it evolves. Get a look at THREE NEW FEATURES and see how easy it is to train and phish your users. Did you know?

Cybersecurity 69

Cybersecurity Phishing Security awareness Military 69