Schneier on Security

JANUARY 31, 2024

In October, the Consumer Financial Protection Bureau (CFPB) proposed a set of rules that if implemented would transform how financial institutions handle personal data about their customers. Beyond these economic effects, the rules have important data security benefits.

Financial Services 101

Financial Services Privacy Personal data Marketing 101

Security Affairs

AUGUST 23, 2019

Mastercard disclosed a data breach that impacted customer data from the company’s Priceless Specials loyalty program. The American multinational financial services corporation noti f ied the data breach to the German and Belgian Data Protection Authorities. ” states MasterCard.

Data breaches 89

Data breaches Financial Services Passwords Security 89

The Last Watchdog

JULY 11, 2023

When it comes to alternative asset trading, protecting investor data is of critical importance. Here are seven tips to protect investor data in alternative asset trading. By working together, a robust cybersecurity framework can be established to protect investor data. Implement strong data encryption.

IT 189

IT Encryption Risk Financial Services 189

The Last Watchdog

FEBRUARY 15, 2024

15, 2024 – Harter Secrest & Emery LLP , a full-service business law firm with offices throughout New York, is pleased to announce that it has been selected as a NetDiligence-authorized Breach Coach ® , a designation only extended to law firms that demonstrate competency and sophistication in data breach response.

Data breaches 100

Data breaches Financial Services Big data Retail 100

IT Governance

NOVEMBER 13, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Records breached: 79,582 Ontario hospitals update: information relating to 5.6 Records breached: 79,582 Ontario hospitals update: information relating to 5.6

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. Healthcare Data Privacy Laws.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Krebs on Security

DECEMBER 13, 2022

” USDoD said the InfraGard user data was made easily available via an Application Programming Interface (API) that is built into several key components of the website that help InfraGard members connect and communicate with each other. “If it was only the phone I will be in [a] bad situation,” USDoD said.

Sales 362

Sales Energy and Utilities Communications Data breaches 362

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Security Affairs

JUNE 20, 2023

Data-centric distributed resilience (DDR) offers a compelling approach to addressing data sovereignty in cybersecurity. As much of our modern life relies upon the cloud, the question of data protection is front of mind for many organizations. Data sovereignty plays a crucial role in a robust security strategy.

Compliance 90

Compliance Cybersecurity Risk Encryption 90

Thales Cloud Protection & Licensing

NOVEMBER 20, 2023

Data breaches in the retail sector illustrate the vulnerabilities inherent to this industry, emphasizing the need for robust cybersecurity measures. This finding not only underscores the vulnerability of the retail sector but also accentuates the financial repercussions of such breaches.

Retail 83

Retail Cybersecurity Financial Services Encryption 83

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Compliance madhav Tue, 09/19/2023 - 05:17 It is essential for any business that stores, processes, and transmits payment card information to comply with the Payment Card Industry Data Security Standard (PCI DSS). Consumers’ payment data is a compelling target for criminals who continue to circumvent IT security defenses. Requirement 3.2

Compliance 77

Compliance Financial Services Data breaches Encryption 77

Security Affairs

DECEMBER 7, 2023

“The Australian and New Zealand Nissan Corporation and Financial Services (“Nissan”) advises that its systems have been subject to a cyber incident. The company did not share details about the attack or its scope. ” reads the statement published by the company on its website. and nissan.co.nz.

Financial Services 120

Financial Services Data breaches Ransomware Access 120

DLA Piper Privacy Matters

JULY 30, 2019

It’s summer, and life’s a breach. A data breach, that is. It’s your service provider’s breach, but it involves your (more likely, your customer’s) data. So put down the beach reading, for some breach reading. Who “owns” a data breach?

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Security 87

Security Data breaches Ransomware Artificial Intelligence 87

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program. But it looks like my own personal data has been breached – again. To make a long story short – the top reason that they didn’t invest in data security was “lack of perceived need” at 52%.

Retail 66

Retail Data breaches Encryption Mining 66

erwin

APRIL 11, 2019

Keeping up with new data protection regulations can be difficult, and the latest – the General Data Protection Regulation (GDPR) – isn’t the only new data protection regulation organizations should be aware of. A number of high-profile data breaches and scandals have increased public awareness of the issue.

GDPR 100

GDPR e-Discovery Compliance Metadata 100

IBM Big Data Hub

DECEMBER 14, 2023

A cybersecurity strategy is not solely about managing risk across a business’ IT infrastructure. The stakes are especially high for organizations in highly regulated industries because they can be exploited through their digital supply chain, giving hackers access to consumers’ valuable and sensitive data.

Cloud 87

Cloud Security Data breaches Cybersecurity 87

Security Affairs

APRIL 8, 2020

The drug testing firm Hammersmith Medicines Research LTD (HMR), which performs live trials of Coronavirus vaccines, discloses a data breach. Stolen data included the personal information for volunteers who surnames begin with D, G, I, or J. ” reads the data breach notification published by the company.

Ransomware 105

Ransomware Data breaches Encryption Financial Services 105

Security Affairs

JUNE 11, 2021

Experts spotted a new mysterious malware that was used to collect a huge amount of data, including sensitive files, credentials, and cookies. terabyte of stolen data. Threat actors used custom malware to steal data from 3.2 “The data was collected from 3.25 million Windows systems between 2018 and 2020.

Computer and Electronics 116

Computer and Electronics Archiving Encryption Passwords 116

IT Governance

FEBRUARY 21, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. TB of ASA Electronics data to its leak site The ALPHV/BlackCat ransomware gang is attempting to extort a ransom from ASA Electronics for 2.7 Data breached: 2.7

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

The Security Ledger

DECEMBER 21, 2022

Paul speaks with Caleb Sima, the CSO of the online trading platform Robinhood, about his journey from teenage cybersecurity phenom and web security pioneer, to successful entrepreneur to an executive in the trenches of protecting high value financial services firms from cyberattacks. Once more unto the (data) breach!

Financial Services 52

Financial Services Cybersecurity Data breaches Authentication 52

IT Governance

NOVEMBER 23, 2023

The financial sector is quite heavily regulated, and involves a lot of confidential data. You’d therefore expect that the sector fares better at data security than your average organisation. In fact, in 2020–2022, the financial sector was the second-most attacked sector, topped only by the retail and manufacturing sector.

Risk 104

Risk Data breaches Authentication Financial Services 104

Security Affairs

OCTOBER 29, 2021

“The government and the people of Papua New Guinea can be assured that the government financial services will continue as usual,” Pundari said. “The Department is conscious of the security and integrity of its data. The government was not able to pay cheques and ordinary operations were impacted.

Ransomware 88

Ransomware Financial Services Government Data breaches 88

Krebs on Security

JANUARY 25, 2022

How about a 900 percent interest loan? Or how about not learning of the fraudulent loan until it gets handed off to collection agents? That worked, and once inside the account Jim could see more about the loan details: The terms of the unauthorized loan in Jim’s name from MSF. Take a look at that 546.56

Financial Services 225

Financial Services IT Data breaches Authentication 225

Thales Cloud Protection & Licensing

FEBRUARY 12, 2024

It’s also an important time because the world is still trying to catch up to changes brought about by the benefits of the Cloud. Despite this imminent threat, the most important reason for organizations to act immediately is that many data centers are not able to easily pivot their cryptography.

Artificial Intelligence 71

Artificial Intelligence Cloud Risk Digital transformation 71

Security Affairs

JANUARY 27, 2022

Personal data belonging to millions of customers of large businesses have been exposed due to a flaw in Onfido IDV. Millions of customers of large businesses have been left vulnerable to identity theft, thanks to a security flaw that exposes their personal data to illicit download. However, these were inactive. Verification process.

Personal data 94

Personal data Phishing Data breaches Passwords 94

Thales Cloud Protection & Licensing

NOVEMBER 22, 2021

Digital-only banks and Fintechs are expected to grow “at a compound annual rate of about 23.41%” from 2021-2026. To compete, financial institutions are investing heavily in digital transformation. The full digitization of contracts, subscriptions and consumption of services. Data security. More About This Author >.

Digital transformation 71

Digital transformation Financial Services Customer Experience Risk 71

Thales Cloud Protection & Licensing

NOVEMBER 16, 2020

Healthcare Organizations Need to Adapt Their Data Protection Policies to the New Threat Environment. For example, data sprawl has significantly increased due to all of the new patient data that has been created during the pandemic. Sensitive medical data is not protected. Tue, 11/17/2020 - 06:44. ransomware).

Digital transformation 62

Digital transformation Encryption Cloud Data breaches 62

The Last Watchdog

JANUARY 30, 2019

Late last year, Atrium Health disclosed it lost sensitive data for some 2.65 The culprit: lax practices of a third-party data and analytics contractor. Related: Atrium Health breach highlights third-party risks. There is impetus for change – beyond the fear of sustaining a major data breach. Uphill battle.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

IT Governance

AUGUST 26, 2021

But if you’ve adopted a hybrid working model or are thinking about it, you must acknowledge the challenges that it brings. For example, financial services firms may be worried about employees breaching insider trading laws. Preventing data breaches. Addressing technical vulnerabilities.

Compliance 119

Compliance Data breaches Privacy Risk 119

The Last Watchdog

MARCH 31, 2020

At RSA 2020 , I had an eye-opening discussion with Rohit Sethi, CEO of Security Compass , about this. Over the years processes, training and tooling to account for data privacy and data integrity have been woven in, driven by data breach lawsuits and the rise of data handling regulations. Enter DevOps.

Security 194

Security Privacy Financial Services Risk 194

Security Affairs

MARCH 24, 2021

Ata Hakcil led the team of white hat hackers from WizCase in identifying a major data leak on online trading broker FBS’ websites. The data from FBS.com and FBS.eu comprised millions of confidential records including names, passwords, email addresses, passport numbers, national IDs, credit cards, financial transactions and more.

Passwords 125

Passwords Phishing Authentication Access 125

Krebs on Security

APRIL 11, 2024

New York City based Sisense has more than 1,000 customers across a range of industry verticals, including financial services, telecommunications, healthcare and higher education. “If they are hosting customer data on a third-party system like Amazon, it better damn well be encrypted,” Weaver said.

Encryption 258

Encryption Passwords Access Financial Services 258

Adam Levin

NOVEMBER 13, 2018

The American business and financial services company Moody’s will start factoring risk of getting hacked into their credit ratings for companies. The move is seen as part of a wider initiative to gauge the risk of cyberattacks and data breaches to companies and their investors. “We’ve Read more about the story here.

Risk 81

Risk Financial Services Manufacturing Data breaches 81

Security Affairs

APRIL 6, 2023

Data leak affected QBANK, Defence Bank, Bloom Money, Admiral Money, MA Money, and Reed. Using leaked data, threat actors could potentially breach banks’ backend infrastructure and consequently the infrastructure of their clients. Among the leaked data, researchers found Google and Liveness API keys.

IT 94

IT Financial Services Access Risk 94

Thales Cloud Protection & Licensing

APRIL 29, 2024

However, a relentless barrage of data breaches, ransomware attacks, and sophisticated cyber threats steadily erodes this trust. Payment Services Directive (PSD3) PSD3 is an updated version of PSD2 and provides rules on the efficiency and security of digital payments and financial services in the EU. PCI DSS 4.0

Compliance 71

Compliance Cybersecurity Risk Manufacturing 71

Rocket Software

AUGUST 17, 2020

For some sectors, like finance, security and data protection are top of mind for everything that is done. Financial services organizations typically experience the most data breaches and hacks, which makes security a priority. But what about healthcare? Patient data is highly sensitive and confidential.

Authentication 52

Authentication Financial Services Passwords Insurance 52