Security Affairs

AUGUST 26, 2021

Documents and personal details of residents of the small Swiss town Rolle, on the shores of Lake Geneva, were stolen in a ransomware attack. The Swiss town Rolle disclosed the data breach after a ransomware attack, personal details of all its 6,200 inhabitants were stolen by threat actors. Pierluigi Paganini.

Personal data 127

Personal data Ransomware Data breaches Education 127

Hunton Privacy

JULY 1, 2020

The Italian Data Protection Authority ( Garante per la protezione dei dati personali , “Garante”) recently announced that it levied a €600,000 fine on banking institution UniCredit for several violations of the Italian Personal Data Protection Code, in its pre-General Data Protection Regulation (“GDPR”) form.

Data breaches 111

Data breaches GDPR Personal data Education 111

IT Governance

JANUARY 9, 2023

Welcome to our review of security incidents for 2022, in which we take a closer look at the information gathered in our monthly lists of data breaches and cyber attacks. IT Governance discovered 1,063 security incidents in 2022, which accounted for 480,014,323 breached records. The biggest data breaches of 2022.

Data breaches 118

Data breaches Ransomware Government Passwords 118

IT Governance

MAY 2, 2023

Welcome to our April 2023 list of data breaches and cyber attacks. Our research identified 120 publicly disclosed incidents during the month, accounting for 4,353,257 breached records. You can find the full list of data breaches and cyber attacks below, along with our rundown of the biggest incidents of the month.

Data breaches 98

Data breaches Ransomware Personal data Access 98

IT Governance

MARCH 1, 2022

Our figures for this month are comparatively low – with 83 data breaches and cyber attacks accounting for 5,127,241 breached records – but there is a sense that we are on the brink of something. Meanwhile, you can find the full list of cyber attacks and data breaches for February 2022 below. Data breaches.

Data breaches 133

Data breaches Ransomware Government Blockchain 133

IT Governance

SEPTEMBER 1, 2021

It has been another month of comparatively few reported cyber attacks and data breaches, with our August list containing 84 incidents accounting for 60,865,828 breached records. You can that incident, along with our full list of cyber attacks and data breaches, below – with those affecting UK organisations listed in bold.

Data breaches 139

Data breaches Ransomware Insurance Data migration 139

IT Governance

MARCH 2, 2020

Ordinance Survey discovers breach of employee data (1,000). South Carolina-based United Health notifies patients of 2019 data breach (36). Ashley Madison data breach victims still being hounded by sextortion scammers (unknown). Massive MGM data breach might be a smokescreen for more insidious attack (10.6

Data breaches 139

Data breaches Ransomware Phishing Personal data 139

IT Governance

DECEMBER 21, 2023

To find out, we looked at the ICO’s (Information Commissioner’s Office) public data set , specifically looking into four data breach types caused by human error: Data emailed to incorrect recipient. Data posted or faxed to incorrect recipient. Failure to redact. Failure to use Bcc. This isn’t too surprising.

Data breaches 52

Data breaches Personal data Government GDPR 52

Hunton Privacy

MARCH 30, 2021

The Draft Guidance also applies to all organizations that process children’s data, not just providers of Information Society Services (“ISS”), and has a broader scope than the ICO Age Appropriate Code, covering issues such as how to address security standards, handle data breaches and use biometrics.

Personal data 111

Personal data GDPR Risk Privacy 111

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). On July 16, 2021, Governor Lamont signed An Act Concerning Data Privacy Breaches , which will take effect on October 1, 2021.

Data breaches 87

Data breaches Privacy Personal data Data Privacy 87

IT Governance

MAY 30, 2019

NY-based Episcopal Health Service notifies patients of data breach (unknown). Oregon Construction Contractors Board confirms data breach (8,013). Sunderland City Council launches investigation after library users’ personal data hacked (45). Graphic design firm Canva hit by massive data breach (139 million).

Data breaches 111

Data breaches Personal data Ransomware Phishing 111

Security Affairs

FEBRUARY 26, 2021

Data Breach: WizCase team uncovered a massive data leak containing private information about Turkish Citizens through a misconfigured Amazon S3 bucket. How Did the Data Breach Happen? In this particular case, Turkey has its own set of laws against the improper handling of personal data, named KVKK.

Data breaches 112

Data breaches Insurance Paper Access 112

Krebs on Security

JUNE 13, 2018

In the days following revelations last September that big-three consumer credit bureau Equifax had been hacked and relieved of personal data on nearly 150 million people , many Americans no doubt felt resigned and powerless to control their information. But not Jessamyn West. Others are following suit.

Data breaches 174

Data breaches Personal data Privacy Libraries 174

Hunton Privacy

AUGUST 31, 2021

The SEC’s order found that Pearson made material misstatements and omissions about the data breach in a report furnished to the SEC and in a media statement.

Data breaches 111

Data breaches Manufacturing Passwords Data Privacy 111

Security Affairs

SEPTEMBER 12, 2023

The BianLian extortion group claims to have stolen 6,8 TB of documents, including International HR data, international personal data. International financial data (over 800 GB), international medical and health data and international email correspondence.

IT 123

IT Ransomware Education Data breaches 123

IT Governance

SEPTEMBER 1, 2020

There were a massive 99 data breaches and cyber attacks in August, making it the third-biggest monthly total of the year by number of security incidents. You can find our full list of publicly disclosed data breaches from August in this blog, with incidents affecting UK organisations listed in bold. Data breaches.

Data breaches 120

Data breaches Ransomware Insurance Manufacturing 120

IT Governance

FEBRUARY 1, 2019

A strong breach recovery process can also protect, or even enhance, an organisation’s reputation and reduce the likelihood of customers turning to competitors. So, when you’re in the middle of that bad day when you learn about a data breach, don’t spend too long being upset, because there’s a lot of work to do.

Data breaches 83

Data breaches GDPR Personal data Compliance 83

Security Affairs

JULY 7, 2024

GootLoader is still active and efficient Hackers stole OpenAI secrets in a 2023 security breach Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes Polyfill.io GootLoader is still active and efficient Hackers stole OpenAI secrets in a 2023 security breach Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes Polyfill.io

Data breaches 106

Data breaches Security Mining Education 106

Thales Cloud Protection & Licensing

OCTOBER 4, 2022

The purpose of these events is to raise awareness about digital security and empower everyone to protect their personal data from digital forms of crime by adopting well established best practices, like the use of Multi-Factor Authentication (MFA) and establishing strong passwords. Raising awareness is essential for everyone.

Authentication 127

Authentication Passwords Cybersecurity Personal data 127

Hunton Privacy

APRIL 27, 2021

Court of Appeals for the Second Circuit affirmed the dismissal on Article III standing grounds of a data breach class action predicated on an alleged increased risk of identity theft. Whether the type of data that has been exposed is sensitive such that there is a high risk of identity theft or fraud. McMorris v.

Data breaches 88

Data breaches Risk Retail Education 88

IT Governance

OCTOBER 26, 2018

Negligent employees are the leading cause of data breaches at small and medium-sized businesses across North America and the UK, according to a recent study from Keeper Security. But his best isn’t good enough, because this year Ian singlehandedly caused a data breach that cost his company more than £20,000.

Data breaches 91

Data breaches Education Personal data Government 91

IT Governance

MAY 7, 2024

Plus, a further 3,029,461 known records newly breached Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 395 GB.

Data breaches 57

Data breaches Education Manufacturing Retail 57

Privacy and Cybersecurity Law

AUGUST 15, 2018

The ICO have been discussing data breach reporting under GDPR in a new webinar. Here are the key points: GDPR introduces mandatory breach reporting. This applies to accidental breaches and internal breaches – not just those that are deliberate or are about losing personal data externally.

Data breaches 45

Data breaches GDPR Personal data Risk 45

Troy Hunt

DECEMBER 21, 2017

In the first 4 parts of "Fixing Data Breaches", I highlighted education , data ownership and minimisation , the ease of disclosure and bug bounties as ways of addressing the problem. That was in November 2015, a mere 3 months after the Ashley Madison data breach. This is an incident where 4.8

Data breaches 51

Data breaches GDPR Education Personal data 51

IT Governance

OCTOBER 24, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023).

Data Privacy 89

Data Privacy Privacy Security Data breaches 89

The Last Watchdog

FEBRUARY 15, 2021

In response to continuing waves of data breaches and network disruptions, companies have made a concerted effort and poured substantial resources into promoting data security awareness among employees, suppliers and clients. Safeguarding data in workplace settings gets plenty of attention. Investing in the future.

Education 203

Education Cybersecurity Security awareness Data breaches 203

Thales Cloud Protection & Licensing

JANUARY 24, 2022

Data Protection Day commemorates the January 28, 1981, signing of Convention 108, the first legally binding international treaty dealing with privacy and data protection. Data Privacy Week also encourages businesses to respect data and be more transparent about how they collect and use customer data.

Data Privacy 127

Data Privacy Privacy IT Security 127

Troy Hunt

DECEMBER 19, 2017

Yesterday, I wrote the first part of this 5-part series on fixing data breaches and I focused on education. The next few parts of this series all focus on cures - how do we fix data breaches once bad code has already been written or bad server configurations deployed? Who Owns Our Personal Data?

Data breaches 53

Data breaches Personal data GDPR Data collection 53

Hunton Privacy

AUGUST 15, 2022

On June 10, 2022, New York became the first state to require attorneys to complete at least one credit of cybersecurity, privacy and data protection training as part of their continuing legal education (“CLE”) requirements. The new requirement will take effect July 1, 2023.

Cybersecurity 114

Cybersecurity Privacy Data Privacy Data breaches 114

Thales Cloud Protection & Licensing

OCTOBER 17, 2023

Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions madhav Wed, 10/18/2023 - 05:25 This month is Cyber Security Awareness Month , highlighting how far security education needs to go in order to enable a secure interconnected world. It's about keeping your data under your home country's control and protection.

Security awareness 129

Security awareness Security Passwords Authentication 129

Security Affairs

APRIL 1, 2023

The Italian Data Protection Authority, Garante Privacy, has temporarily banned ChatGPT due to the illegal collection of personal data and the absence of systems for verifying the age of minors. The Authority pointed out that OpenAI does not alert users that it is collecting their data. ” continues the press release.

Privacy 98

Privacy Personal data GDPR Compliance 98

The Guardian Data Protection

NOVEMBER 19, 2017

Information Commissioner to look at evidence of wealth screening of former students before approaches made for donations University fundraising is to be examined by the Information Commissioner after allegations emerged that the personal data of some alumni was being misused.

Data breaches 77

Data breaches Personal data Education 77

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: >33,000,000 people’s data. Compromised data included names, ID card numbers, phone numbers, emails, salaries and personal photographs.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 Data breached: 41,500,000 records. They accessed 41.5

Data Privacy 57

Data Privacy Privacy Manufacturing Data breaches 57

IT Governance

NOVEMBER 24, 2021

Data breaches. Some people mistakenly believe that storing information in the Cloud removes the risk of data breaches. As such, the only way to protect your organisation is to educate staff on phishing attacks and teach them what to look out for. The website is simply designed to look like the real thing.

Cloud 125

Cloud Risk Security Data breaches 125

Data Matters

JUNE 22, 2022

Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law. Additionally, unlike CCPA, there is no private right of action in connection with data breaches.

Data Privacy 87

Data Privacy Privacy Personal data Sales 87

Hunton Privacy

MARCH 4, 2021

In addition to the consultation on SMEs, the ANPD has already opened a new call for preliminary input on the topic of notification of data breaches (in Portuguese) to the ANPD as well as data subjects. The ANPD is planning to finalize their rules on data breach notification within one year.

Compliance 75

Compliance Personal data Data breaches Education 75