Troy Hunt

NOVEMBER 14, 2023

Allegedly, Acuity had a data breach. That's the context that accompanied a massive trove of data that was sent to me 2 years ago now. It was only this week as I desperately tried to make some space to process yet more data that I realised why I was short on space in the first place: Ah, yeah - Acuity - that big blue 437GB blob.

Insurance 122

Insurance Data breaches Mining IT 122

Hunton Privacy

OCTOBER 25, 2023

On October 8, 2023 and October 10, 2023, California Governor Gavin Newsom signed A.B. 947 amends the California Consumer Privacy Act of 2018’s (“CCPA”) definition of “sensitive personal information” to include personal information that reveals a consumer’s “citizenship or immigration status,” while A.B. 1194 , S.B.

Manufacturing 72

Manufacturing Personal data Privacy Access 72

Security Affairs

OCTOBER 6, 2023

Researchers published PoC exploits for CVE-2023-4911 vulnerability (aka Looney Tunables) impacting most popular Linux distributions. The vulnerability CVE-2023-4911 (CVSS score 7.8) ” Below is the disclosure timeline: 2023-09-04: Advisory and exploit sent to secalert@redhat. ” concludes the report.

Libraries 97

Libraries Risk Security IT 97

Data Matters

JUNE 1, 2022

There is a lot to digest, so below is our breakdown of the top 10 key points you should know about the EU’s new rules. April 2023: The DMA becomes applicable (i.e., June 2023: Deadline for notifications to the Commission on whether the undertaking meets the criteria and falls within the definition of “gatekeeper.”.

Marketing 88

Marketing Computer and Electronics Communications GDPR 88

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 The compromised data allegedly includes names, email addresses and phone numbers.

Data Privacy 63

Data Privacy Privacy Manufacturing Data breaches 63

Hunton Privacy

AUGUST 22, 2023

reports that in early August 2023, the Indian Parliament passed the Digital Personal Data Protection Act (the “Act”), bringing to a close a 5-year process to enact an omnibus data privacy law in India. Grounds for Collection and Processing Consent continues to be the primary legal ground for the processing of personal data.

Personal data 90

Personal data Data breaches GDPR Government 90

Krebs on Security

MAY 23, 2024

But Stark Industries Solutions Ltd was incorporated on February 10, 2022, just two weeks before the Russian invasion of Ukraine. “But, in this situation, unfortunately, no one contacted us to report that there was an attack from our addresses; if someone had contacted us, we would have definitely blocked the network data.”

Cloud 271

Cloud Education Government Phishing 271

Hunton Privacy

FEBRUARY 17, 2023

On February 10, 2023, an Illinois federal district court ordered the dismissal of a putative class action lawsuit alleging that an online tool that allowed users to virtually try on sunglasses violated the Illinois Biometric Privacy Act (“BIPA”). 740 ILCS 14/10. In Delma Warmack-Stillwell v. Christian Dior Inc. ,

Information capture 55

Information capture Privacy IT Information Security 55

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law.

Privacy 118

Privacy Personal data Sales B2B 118

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Financial information, medical data, health reimbursements, postal addresses, telephone numbers and emails are not thought to have been compromised.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IBM Big Data Hub

MARCH 27, 2024

The company is working with extremely high volumes of data and expects this situation to continue or grow. So, you’ve got a ton of assets earmarked for data storage , with many more workloads on the way. Your business isn’t expecting this data to collect dust in a vault, either. What is a hyperscale data center?

Cloud 99

Cloud Marketing Retail Artificial Intelligence 99

Data Protection Report

AUGUST 4, 2022

The long awaited details with respect to cross border data transfer under the China Personal Information Protection Law ( PIPL ) have very recently been published by the Chinese authorities. final Security Assessment Measures for Outbound Data Transfers (??????????) (“ Security Assessment Measures ”) released on 7 July 2022.

Security 59

Security Access IT Risk 59

DLA Piper Privacy Matters

MARCH 7, 2023

Authors: Andreas Rüdiger , Philipp Adelberg On 14 February 2023, the European Data Protection Board (“ EDPB ”) published the updated and final version of its Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR ( EDPB Guidelines 05/2021 ).

GDPR 52

GDPR Personal data Risk Access 52

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act does not, of course, supersede federal privacy or data security laws, such as HIPAA. 6491 (Act). MCL § 500.550. MCL § 500.560(6). Dedicated Customer Notice Provisions.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Data Matters

SEPTEMBER 7, 2022

The Privacy Working Group expects to expose a draft of the new model by the NAIC’s Fall 2022 National Meeting (Fall 2022 Meeting), with final adoption by the Privacy Working Group expected to occur by the NAIC’s Summer 2023 National Meeting. NAIC Progresses Revisions to Statements of Statutory Accounting Principles. 26R — Bonds (SSAP No.

Insurance 78

Insurance Paper Privacy Risk 78

Hunton Privacy

JUNE 15, 2023

On June 14, 2023, the European Parliament (“EP”) approved its negotiating mandate (the “EP’s Position”) regarding the EU’s Proposal for a Regulation laying down harmonized rules on Artificial Intelligence (the “AI Act”). The final version of the AI Act is expected before the end of 2023. Users of AI systems are now called “deployers.”

Risk 55

Risk Artificial Intelligence Compliance GDPR 55

OpenText Information Management

APRIL 5, 2024

Beta testing DevOps Aviator After I presented at OpenText World 2023 in Las Vegas, I accepted an invitation from OpenText to take part in the beta testing of its new OpenText™ DevOps Aviator™ solution. Aviator is Large Language Model (LLM) technology that uses Google’s PaLM 2 data lake as its main source of reference data.

Retail 67

Retail IT 67

IBM Big Data Hub

MAY 6, 2024

In 2022, less than 10% of trial participants for FDA approval were Black, fewer than 12% were Asian, under 13% were Hispanic, and women constituted less than 50% (Exhibit 3), not reflective of the current US population. They also pave the way into the realm of digital behavior data.

Computer and Electronics 80

Computer and Electronics Healthcare Artificial Intelligence Marketing 80

Data Matters

NOVEMBER 4, 2020

The law, most of which does not go into effect until January 1, 2023, will substantially overhaul and amend the California Consumer Privacy Act (CCPA) which went into effect just this year, on January 1, 2020, with final regulations issued just a few months ago, on August 14, 2020. Changes to the Definition of Businesses Subject to the CPRA.

Privacy 122

Privacy B2B Sales Data breaches 122

Hunton Privacy

JULY 27, 2023

On July 26, 2023, the U.S. The new rules are effective as soon as December 18, 2023, as detailed further below. The Form 8-K and Form 10-K reporting requirements were also modified from the proposed rules to take into account public comment on the proposal. The final rules apply both to U.S. capital markets.

Cybersecurity 52

Cybersecurity Risk Communications Government 52

eSecurity Planet

SEPTEMBER 8, 2023

API security protects data and back-end systems while preserving fluid communication between software components through strict protocols and access controls. Fundamentals of API Security API security includes a range of tactics such as strict authentication and authorization methods, data encryption technologies, and strong access controls.

Security 109

Security Authentication Access Encryption 109

Data Matters

MARCH 29, 2022

The OAG’s position in this regard expressly rejects Assemblyman Kiley’s argument to the contrary, that internally-generated inferences are not collected “from” a consumer and, therefore, should not be among the types of data that can be provided in response to a data subject request. Opinion at 13. Opinion at 12. Opinion at 12.

Privacy 88

Privacy IT Government 88

eSecurity Planet

JULY 19, 2023

API calls per year, 2 organizations and 10 environments, 3 months of analytics preserved, and a 99.9% It can be deployed entirely on-premises or in a private data center, making it a flexible solution for businesses of all sizes. It includes 1.2B runtime SLA.

Security 98

Security Analytics Cloud Compliance 98

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Data breached: 5 TB.

Data Privacy 98

Data Privacy Energy and Utilities Privacy Manufacturing 98

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 36 million records. Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. Data breached: 6,935,412 individuals’ data.

Data Privacy 79

Data Privacy Privacy Security Data breaches 79

The Last Watchdog

NOVEMBER 4, 2021

Europe’s General Data Protection Regulations (GDPR) changed the game. Legacy filing systems were not built to keep track of the personal data of specific individuals primarily to be in compliance with the many data protection regulations popping up around the world. Related: GDPR and the new privacy paradigm. billion by 2027.

Personal data 237

Personal data Unstructured data Privacy Data Privacy 237

eSecurity Planet

JUNE 1, 2023

Definitions, Pros, Cons, and More first. Reports can be difficult to understand without using third-party tools that help organize and highlight important data. Minor email sources with fewer than 10 emails sent in a given time period can generally be ignored. Some failing source domains/IPs that won’t make sense.

Authentication 98

Authentication Marketing File names IT 98

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

DLA Piper Privacy Matters

MARCH 3, 2023

Author: Sarah Birkett Cyber Security Strategy discussion paper launched This week saw the launch of a discussion paper for the Australian Government’s 2023-2030 Australian Cyber Security Strategy. The Strategy is expected to be finalised by the end of 2023. Supporting Australia’s cyber security workforce and skills pipeline.

Data breaches 52

Data breaches Security Paper Financial Services 52

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

KnowBe4

APRIL 25, 2023

CyberheistNews Vol 13 #17 | April 25th, 2023 [Head Start] Effective Methods How To Teach Social Engineering to an AI Remember The Sims? Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense. Well Stanford created a small virtual world with 25 ChatGPT-powered "people."

Insurance 74

Insurance Security awareness Phishing Ransomware 74

Troy Hunt

DECEMBER 3, 2023

” Anyone can type in an email address into the site to check if their personal data has been compromised in a security breach. And somehow, this little project is now referenced in the definition of the name it emerged from. Or the UK's NCA to be feeding data in. 🤣", the internet quipped.

Data breaches 145

Data breaches Passwords Sales IT 145

Schneier on Security

FEBRUARY 28, 2024

President Biden’s 2023 National Cybersecurity Strategy tasked the Treasury and Homeland Security Departments with investigating possible ways of implementing something similar for large cyberattacks. That clarity will require very specific definitions of what types of cyberattacks the government will and will not pay for.

Insurance 91

Insurance Government Cybersecurity Risk 91

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is more than mere credentials, too – according to Cybernews, most of the exposed data is sensitive. In total, 3,876 domain names were included in the exposed data set.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

ForAllSecure

MAY 17, 2023

That's where even if they're still doing it themselves, they are definitely looking for partners who can help them cover in the areas where, you know, their capability may not be quite as hard and fast as it should be. It’s not like data breaches are going away, they’re shifting. Double extortion is going to continue.

Insurance 40

Insurance Privacy Ransomware GDPR 40

IBM Big Data Hub

OCTOBER 4, 2023

I recently attended GraphQLConf 2023, the GraphQL conference in San Francisco where GraphQL experts and users from all over the world came together to discuss the future of the technology. A report from Gartner ® predicted that by 2025, more than 50% of enterprises will use GraphQL in production, up from less than 10% in 2021.

Artificial Intelligence 78

Artificial Intelligence Security IT 78

IT Governance

FEBRUARY 6, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Eye4Fraud database allegedly leaked – 14.9 Data breached: 14,900,000 lines. million unique records, with 9.4

Data Privacy 77

Data Privacy Privacy Insurance Security 77