IT Governance

OCTOBER 24, 2023

American Family Insurance confirms cyberattack is behind IT outages Date of breach: 14 or 15 October 2023. Breached organisation: American Family Insurance, headquartered in Wisconsin, US. The post The Week in Cyber Security and Data Privacy: 16–22 October 2023 appeared first on IT Governance UK Blog.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

IT Governance

NOVEMBER 6, 2023

Compromised information included patients’ names, dates of birth, postal addresses, Social Security numbers, diagnosis and treatment information, and health insurance information. Compromised data included names, Social Security numbers, and health/medical insurance plan numbers.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

IT Governance

JANUARY 9, 2024

million people was compromised, including names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. Data breached: 4,452,782 records. 79 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Data Matters

JUNE 22, 2022

Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

Hunton Privacy

SEPTEMBER 21, 2023

The publication offers general guidance on issues including what entities the specific laws and regulations cover, the measures covered entities can adopt to maintain the privacy and security of consumers’ health information, and the steps entities must take in the event of a data breach.

Privacy 74

Privacy Data Privacy Security Insurance 74

IT Governance

FEBRUARY 21, 2024

Welfare Benefits Plan Source 1 ; source 2 New Healthcare USA Yes 13,079 Insurance ACE/Humana Inc. Subscribe now The post The Week in Cyber Security and Data Privacy: 12 – 18 February 2024 appeared first on IT Governance UK Blog. Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. New EU restrictions could force companies to change data transfer practices and adopt more advanced data encryption methods. In recent years, costly breaches and evolving data security concerns have bubbled up to a board level agenda item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. GB Signature Performance, Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Reltio

JUNE 9, 2022

The insurance industry is facing unprecedented disruption. Insurance carriers have been called to transform customer experience, business offerings, and operations. As an insurer, your current business models are being challenged by new thinking, new competitors, and new ways of working.

Digital transformation 52

Digital transformation Insurance Customer Experience MDM 52

IT Governance

NOVEMBER 28, 2023

The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. In the meantime, if you missed it, check out last week’s round-up. Please do also let us know what you think about our new table format.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

NOVEMBER 20, 2023

Rackspace ransomware recovery has cost $11 million so far Rackspace has told the SEC that recovering from a ransomware attack last December has cost it $11 million in remediation so far – although half of that amount has been covered by insurance. That’s it for this week’s round-up. We hope you found it useful.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IT Governance

OCTOBER 31, 2023

Incident details: A security vulnerability in a third party left personal data exposed of thousands of motorists who had their vehicle towed on behalf of the An Garda Síochána. It’s unclear how long the vulnerability was in place, or who may have accessed the data. million genetic data profiles leaked.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

The Last Watchdog

AUGUST 1, 2019

Related: Hackers direct botnets to manipulate business logic Thompson is accused of pilfering sensitive data for 100 million US and 6 million Canadian bank patrons. It could be FTC first, then European GDPR and Canadian PIPEDA, then upcoming California Consumer Privacy Act, and many other privacy regulations worldwide.

Data Privacy 147

Data Privacy Privacy Data breaches Cloud 147

Data Matters

DECEMBER 2, 2020

Regarding data breaches resulting in significant harm : the Advisory Guidelines 1 have prescribed the following classes of personal data that are considered likely to result in significant harm if compromised: (i) Individual’s full name or full national ID number in combination with.

Data Privacy 74

Data Privacy Privacy Data breaches Personal data 74

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. This appears to align with the new tiered data classification obligations under the Data Security Law.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Collibra

JUNE 23, 2023

The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. Focus: Regulatory frameworks Within the United States there are a number of regulatory frameworks that address citizen privacy.

Privacy 107

Privacy Government Data Privacy Data breaches 107

Information Management Resources

JUNE 19, 2018

Despite that willingness by young customers to give up a level of data privacy, most insurance firms are already struggling to deliver a connected experience, says Jerome Bugnet.

Insurance 32

Insurance Data Privacy IT Privacy 32

IT Governance

DECEMBER 14, 2021

Organisations such as IT Governance that offer cyber security as a service assign dedicated experts to oversee the organisation’s data protection and data privacy needs. You’ll receive cyber insurance cover ?. Many cyber-security-as-a-service offerings include cyber insurance as part of the package.

Security 131

Security Insurance Data breaches Information Security 131

Data Protection Report

FEBRUARY 21, 2018

As Data Protection Report posted on January 29, 2018 , lawmakers in Colorado are considering legislation that, if enacted, would significantly strengthen Colorado’s data privacy protections. The proposed bill overlaps with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and state privacy laws.

Data Privacy 40

Data Privacy Privacy Military Insurance 40

Data Protection Report

SEPTEMBER 23, 2021

The declining cost of electronic data storage may have caused some company executives to conclude that retaining personal data forever is “cheap.” The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019.

Personal data 109

Personal data Insurance GDPR Record destruction 109

The Last Watchdog

OCTOBER 29, 2018

the Health Insurance Portability and Accountability Act (HIPAA)), the answer is generally that a company should implement a “reasonable data privacy and security program” under all circumstances. Companies should have written data privacy and security policies and procedures in place. Insurability.

Security 129

Security Data Privacy Privacy Data breaches 129

Krebs on Security

JUNE 4, 2019

AMCA has advised LabCorp that Social Security Numbers and insurance identification information are not stored or maintained for LabCorp consumers.” We remain committed to our system’s security, data privacy, and the protection of personal information.” We have also advised law enforcement of this incident.

Insurance 241

Insurance Data Privacy Access Security 241

Security Affairs

MARCH 17, 2024

France Travail data breach impacted 43 Million people Scranton School District in Pennsylvania suffered a ransomware attack Lazarus APT group returned to Tornado Cash to launder stolen funds Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case UK Defence Secretary jet hit by an electronic warfare attack in Poland Cisco (..)

Data breaches 96

Data breaches Security Computer and Electronics Ransomware 96

Data Matters

FEBRUARY 25, 2022

Sidley and OneTrust DataGuidance are pleased to announce that registration is now open for their annual Data Protection in Financial Services (DPFS) Week. Join us from February 28 – March 3 for DPFS Week 2022 , a series of webinars looking at the impacts of data privacy across the financial sector.

Financial Services 103

Financial Services Privacy Data Privacy Cybersecurity 103

Hunton Privacy

MARCH 9, 2023

Insights from Subcommittees : The Board’s Public Awareness Subcommittee is committed to raising public awareness of consumers’ rights and businesses’ responsibilities under the California Consumer Privacy Act (“CCPA”) as part of its top priorities for this year.

Privacy 58

Privacy Insurance Data Privacy Cybersecurity 58

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Rafael Moscatel, CIPM, CRM, IGP, is the Managing Director of Compliance and Privacy Partners.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Data Protection Report

DECEMBER 8, 2022

Norton Rose Fulbright Canada’s cyber litigation team recently obtained an order in favour of an insurer, granting it relief from forfeiture in respect of more than 11 bitcoins from the assets seized from a prolific ransomware gang. [1] Insurers excluded from restitution order.

Ransomware 98

Ransomware Insurance IT Data breaches 98

OpenText Information Management

MARCH 22, 2019

Confidentiality and data privacy have always been concerns for businesses, particularly in industries like legal, healthcare, financial, and insurance.

Insurance 73

Insurance Data Privacy Privacy ECM 73

The Last Watchdog

APRIL 30, 2019

The CSF’s core principles have been incorporated into Europe’s GDPR , NYDFS’s cybersecurity requirement s, California’s Consumer Privacy Act and Ohio’s Data Protection Act. And they echo through a wide variety of other risk assessment tools and initiatives that touch on third-party risks and data privacy. Wrenn said. “So

Cybersecurity 143

Cybersecurity Insurance Security Privacy 143

Record Nations

NOVEMBER 22, 2019

The Health Insurance Portability & Accountability Act (HIPAA) was passed in 1996, and at its most basic is designed to help safeguard protected health information (PHI) by providing standards for ensuring the data privacy and security of medical information.

Insurance 56

Insurance Data Privacy Privacy Security 56

Hunton Privacy

AUGUST 2, 2021

On June 16, 2021, Connecticut Governor Ned Lamont signed HB 5310, An Act Concerning Data Privacy Breaches. New Breach Notification Requirements (HB 5310). requiring “preliminary substitute notice” to individuals if a business cannot provide direct notification within the 60-day notification timeframe.

Cybersecurity 87

Cybersecurity Insurance Military Data Privacy 87

Hunton Privacy

JUNE 27, 2023

These bills contain provisions similar to Washington’s My Health My Data Act and expand on protections in the Health Insurance Portability and Accountability Act of 1996 and other privacy laws. 370 would provide consumers with access, opt-out and deletion rights with respect to their consumer health data.

Data Privacy 69

Data Privacy Personal data Privacy Insurance 69

Security Affairs

JUNE 12, 2023

In February, the Clop ransomware group claimed to have stolen sensitive data from over 130 organizations by exploiting a zero-day vulnerability ( CVE-2023-0669 ) in Fortra’s GoAnywhere MFT secure file transfer tool. ITx promptly launched an investigation to determine the nature and scope of the Fortra Event. .

Data breaches 82

Data breaches Ransomware Insurance Data Privacy 82

eSecurity Planet

OCTOBER 18, 2021

” Cyber Insurance No Longer Reliable. ” Crockett said unofficial numbers indicate that only about 10 percent of such cyber insurance claims are paid out. ” Crockett said unofficial numbers indicate that only about 10 percent of such cyber insurance claims are paid out. “This is a form of economic warfare.”

Ransomware 90

Ransomware Insurance Digital transformation Cybersecurity 90

IBM Big Data Hub

OCTOBER 30, 2023

Adopting AI in business at scale is not without its challenges, including data privacy concerns, integration complexities and the need for skilled personnel. Scaling AI in business presents unique challenges: Data accessibility : Fragmented and siloed data stifle advancement.

Analytics 82

Analytics Retail Cloud Insurance 82

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law.

Privacy 118

Privacy Personal data Sales B2B 118

Hunton Privacy

APRIL 4, 2017

In March 2017, Syed Ahmad, a partner with Hunton & Williams LLP’s insurance practice, and Eileen Garczynski, partner at insurance brokerage Ames & Gough, co-authored an article, Protecting Company Assets with Cyber Liability Insurance , in Mealey’s Data Privacy Law Report. Read the full article.

Insurance 40

Insurance Data Privacy Privacy IT 40