IT Governance

MAY 7, 2024

A further 381,000 New York City public school students affected by 2022 data breach In January 2022 , personal data from around 820,000 New York City public school students, both current and former, was breached. Data breached: 1,201,000 people’s data. Organisation(s) Sector Location Data breached? Young, Inc.

Data breaches 59

Data breaches Education Manufacturing Retail 59

The Last Watchdog

OCTOBER 5, 2023

Byron is the founder and editor-in-chief of The Last Watchdog on Privacy & Security. His news analysis columns, podcasts, and videos are crafted to foster a useful understanding of complex privacy and cybersecurity developments for company decision-makers and individual citizens — for the greater good.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

IBM Big Data Hub

JULY 7, 2023

Threats to your data are virtually everywhere these days, and too often, data compromises seem almost inevitable. But with a proactive approach to data security, organizations can fight back against the seemingly endless waves of threats. A comprehensive data security strategy includes people, processes and technology.

Security 40

Security Data breaches Data Privacy Compliance 40

Hunton Privacy

JUNE 22, 2020

On July 1, 2020, amendments to Vermont’s data breach notification law, signed into law earlier this year, will take effect along with Vermont’s new student privacy law. Security Breach Notice Act. Student Data Privacy. Read Vermont’s explanation of the amendments.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law.

Privacy 118

Privacy Personal data Sales B2B 118

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Schneier on Security

JANUARY 29, 2020

To comply with California's new data privacy law, companies that collect information on consumers and users are forced to be more transparent about it. Sometimes the results are creepy. It says Ralphs may pry into "financial and payment information like your bank account, credit and debit card numbers, and your credit history.".

Insurance 126

Insurance Data Privacy Education Privacy 126

IT Governance

JUNE 1, 2022

Welcome to our May 2022 review of data breaches and cyber attacks. We identified 77 security incidents during the month, resulting in 49,782,129 compromised records. Meanwhile, be sure to subscribe to our Weekly Round-up to receive the latest cyber security news and advice delivered straight to your inbox.

Data breaches 126

Data breaches Ransomware Phishing Education 126

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches. Uniform Personal Data Protection Act.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Data Protection Report

JANUARY 4, 2024

FBI Policy Notice 1297N, Cyber Victim Requests to Delay Securities and Exchange Commission Public Disclosure (Dec. The Utah Consumer Privacy Act, available at [link] 10.a. The Texas Data Privacy and Security Act (HB4) can be found here: [link] See our summary here: [link] 10.b Answers are below.

Privacy 110

Privacy Cybersecurity Artificial Intelligence e-Discovery 110

IT Governance

SEPTEMBER 1, 2021

Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Cyber attacks.

Data breaches 140

Data breaches Ransomware Insurance Data migration 140

eDiscovery Daily

FEBRUARY 11, 2019

As covered in Alston & Bird’s Privacy and Data Security Blog ( Google-Style GDPR Fines for Everyone? The companies audited were from industries ranging from online retail to sports to banking & insurance to media, even automotive & electronics and home and residential. Well, you may want to think again.

Privacy 46

Privacy Data Privacy GDPR Compliance 46

IT Governance

MARCH 11, 2024

Source (New) Transport USA Yes 3,815 Okta Source 1 ; source 2 (Update) Cyber security USA Yes 3,800 Shah Dixit & Associates, P.C. Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

APRIL 22, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight Criminal hackers threaten to leak World-Check screening database A criminal group known as GhostR claims to have stolen 5.3 Compromised data includes names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

MARCH 5, 2024

Known data breached Pure Incubation Ventures Source (New) Professional services USA Yes 183,754,481 EasyPark Source 1 ; source 2 ; source 3 (Update) Software Sweden Yes 21,100,000 Cutout.Pro Source (New) Software Hong Kong Yes 19,972,829 Optum Source 1 ; source 2 (New) Healthcare USA Yes 6 TB Kumagai Gumi Group Co.,

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

JULY 18, 2019

The Small Business Cybersecurity Assistance Act may provide business owners with access to government-level tools to secure small business against attacks. As a result, they outsource most of their IT and digital systems architecture work, including data hosting services, to third parties. What Does the SBCAA Seek to Accomplish?

Cybersecurity 63

Cybersecurity Education Government Risk 63

IT Governance

JANUARY 3, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight Unprotected Real Estate Wealth Network database exposes more than 1.5 billion records The security researcher Jeremiah Fowler discovered an unprotected database exposing more than 1.5 billion records containing property ownership data related to millions of people.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

IT Governance

APRIL 9, 2024

Data breached: 8,460,182 accounts. Cybernews has now discovered that the company has, once again, exposed highly sensitive children’s data because of configuration errors. million unique Social Security numbers. Other databases contained health insurance data, such as patents’ names, dates of birth, addresses and medical data.

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. million customers’ data.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 5, 2023

The security researcher Bob Diachenko of SecurityDiscovery first identified the exposed information in mid-September. Organisation name Sector Location Data exfiltrated? Source (New) Education USA Yes 1,493 Kimber Mfg., We’ve also found 9 organisations providing a significant update on a previously disclosed incident.

Data Privacy 106

Data Privacy Privacy Manufacturing Retail 106

IT Governance

FEBRUARY 27, 2024

The breached data includes names, addresses, emails, phone numbers, dates of birth, and financial account and Social Security numbers. Data breached: 16,924,071 individuals’ data. The breached data may include names, Social Security numbers and health insurance information.

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

Collibra

DECEMBER 16, 2020

Viewed more broadly, the data associated with a patient’s engagement with a healthcare provider – for example, admissions records and procedures performed – can provide insights into the future strategy of the organization. . As a result, data governance in healthcare is non-negotiable. Numerous and complex regulations.

Government 59

Government Data Privacy Privacy Communications 59

IT Governance

DECEMBER 11, 2023

Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. Source (New) Transport USA Yes 129,611 Tcman Source (New) Manufacturing Spain Yes 108 GB (179 files) Compass Group Italia Source (New) Hospitality Italy Yes 107 GB Pan-American Life Insurance Group, Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

ForAllSecure

MAY 17, 2023

Chris Gray of Deep Watch talks about the view from the inside of a virtual SOC, the ability to see threats against a large number of SMB organizations, and the changes to cyber insurance we’re seeing as a result. A lot of SMBs do not have security operations centers or SOCs. They can provide that additional security, remotely.

Insurance 40

Insurance Privacy Ransomware GDPR 40

IT Governance

JANUARY 16, 2024

GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St. GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Matters

SEPTEMBER 24, 2019

The GDPR was designed to harmonize data protection laws across Europe and to protect EU residents’ data privacy rights; and, its coming triggered significant privacy and data protection compliance activities amongst organizations doing business in the EU and working with the personal data of EU residents.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

IT Governance

FEBRUARY 6, 2024

Source 1 ; source 2 (New) Professional services USA Yes 11,556 Poder Judicial de Santa Cruz Source (New) Legal Argentina Yes 8,732 J.D.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 2 PB. Compromised data includes victims’ names, addresses, phone numbers and Aadhaar numbers (a 12-digit government identification number).

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. IT governance and security. Audit management.

Compliance 67

Compliance Risk Government Retail 67

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. IT governance and security. Audit management.

Compliance 57

Compliance Risk Government Retail 57

IT Governance

JANUARY 30, 2019

Data protection under the GDPR looks like this: there are data subjects (that’s individuals like you and me), and we own our own personal data. Vital interests : for example, when processing data will protect someone’s physical integrity or life (either the data subject’s or someone else’s).

GDPR 86

GDPR Compliance Personal data Data breaches 86

eDiscovery Daily

DECEMBER 3, 2017

Accountability: data subjects should have a method available to them to hold data collectors accountable for not following the above principles. The OECD Guidelines, however, were non-binding, and data privacy laws still varied widely across Europe. Discuss steps to take to insure compliance with the GDPR.

GDPR 44

GDPR IT Personal data Privacy 44

Information Governance Perspectives

JULY 23, 2020

And I think in predicting who’s going to dominate this growing market, again, we have to go back to the issue of cybersecurity, confidentiality and data privacy, don’t we? So security is up to you, plain and simple. And before the customer experience which is also important, but useless unless you can ensure privacy.

Cybersecurity 52

Cybersecurity Passwords Risk IT 52

IT Governance

APRIL 29, 2024

Data breached: 4,186,879,104 messages. Keyboard app vulnerabilities reveal keystrokes to network eavesdroppers Security researchers have identified critical security vulnerabilities in Cloud-based pinyin keyboard apps from Baidu, Inc., Honor, Huawei, iFlytek, OPPO, Samsung Electronics, Tencent, Vivo and Xiaomi Technology.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

IBM Big Data Hub

APRIL 4, 2024

The popularity of private cloud is growing, primarily driven by the need for greater data security. Across industries like education, retail and government, organizations are choosing private cloud settings to conduct business use cases involving workloads with sensitive information and to comply with data privacy and compliance needs.

Cloud 103

Cloud Digital transformation Access Compliance 103

Collibra

NOVEMBER 2, 2020

The categories of personal information includes but is not restricted to: Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

Privacy 59

Privacy Education Insurance GDPR 59