eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. PIPL Raises the Bar – And the Stakes.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. The post Kentucky and Maryland Recently Joined Other States in Adopting NAIC Model Data Security Law.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Data Protection Report

APRIL 30, 2024

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy.

Personal data 85

Personal data Privacy Information governance Compliance 85

Security Affairs

OCTOBER 1, 2023

Experts warn that the recent attack on building automation giant Johnson Controls may have exposed data of the Department of Homeland Security (DHS). The threat actors also claim to have stolen over 27 TB of corporate data and encrypted the company’s VMWare ESXi virtual machines during the attack.” reported Bleeping Computer.

Ransomware 125

Ransomware Insurance Cybersecurity Encryption 125

IT Governance

OCTOBER 24, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023).

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

IT Governance

NOVEMBER 1, 2022

Welcome to our October 2022 review of data breaches and cyber attacks. By contrast, comparatively little personal data was breached, with our figures confirming that at least 9,990,855 records were compromised. For now, it’s unclear what damage the data could cause if exposed, so we’ve omitted the figure from our tally.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. With the ever-present danger of data breaches and cyber attacks, organisations must be sure that they have the financial backing to respond appropriately. The most common reasons that insurers reject cyber insurance claims are organisations’ failure to. Protect data in transit.

Insurance 89

Insurance Data breaches Risk Information Security 89

Hunton Privacy

JULY 1, 2022

In its consent order , the Department noted that the cybersecurity events had caused the exposure of a substantial amount of sensitive personal data belonging to Carnival’s customers, including those residing in New York. NYDFS also found that Carnival had failed to implement basic protocols to prevent data breaches.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

eSecurity Planet

MAY 26, 2023

Confidential computing is a technology and technique that encrypts and stores an organization’s most sensitive data in a secure portion of a computer’s processor — known as the Trusted Execution Environment (TEE) — while it’s processed and in use. How Does Confidential Computing Work?

Encryption 93

Encryption Cloud IoT Blockchain 93

Krebs on Security

FEBRUARY 20, 2024

Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates. The DOJ today unsealed indictments against two Russian men alleged to be active members of LockBit.

Ransomware 266

Ransomware Encryption Insurance Manufacturing 266

IT Governance

NOVEMBER 13, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data included shoppers’ names, email addresses, phone numbers, countries of residence and membership numbers.

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. New EU restrictions could force companies to change data transfer practices and adopt more advanced data encryption methods. In recent years, costly breaches and evolving data security concerns have bubbled up to a board level agenda item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Thales Cloud Protection & Licensing

MAY 9, 2022

However, even after the Colonial Pipeline attack, less than half of businesses (48%) have a formal ransomware plan according to the 2022 Thales Data Threat Report. In addition, the report found that one in five businesses have paid or would pay a ransom to get their data. Governments step up to protect all businesses.

Insurance 71

Insurance Ransomware Encryption Authentication 71

IT Governance

MARCH 1, 2023

Welcome to our February 2023 list of data breaches and cyber attacks. It follows a mammoth start to the year, with more than 277 million breached records in January , and brings the running total for the year to over 300 million pieces of compromised personal data. You can find the full list of data breaches and cyber attacks below.

Data breaches 130

Data breaches Ransomware e-Delivery Government 130

Thales Cloud Protection & Licensing

AUGUST 3, 2021

Protecting Medical Data Against a Cyber-Attack Pandemic. Patient records were always valued by attackers for launching sophisticated insurance fraud schemes, purchasing medical supplies or drugs, or committing other types of fraud including identity theft. Tue, 08/03/2021 - 09:44. Such was the case with the COVID-19 pandemic.

IoT 87

IoT Encryption Cloud Authentication 87

Security Affairs

APRIL 6, 2020

vpnMentor researchers discovered that the popular digital wallet application Key Ring exposed data belonging to millions of users in a huge data leak. Further investigation allowed the experts to discovered other unsecured S3 buckets belonging to the company that were also exposing sensitive data. ” continues the report.

Retail 104

Retail Encryption Insurance Passwords 104

Krebs on Security

FEBRUARY 19, 2020

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. Citrix’s letter was prompted by laws in virtually all U.S.

Passwords 354

Passwords Access Insurance Government 354

Thales Cloud Protection & Licensing

NOVEMBER 9, 2021

These were just some of the major facets of cloud transformation that are creating challenges for data security that I discussed with Sunil Potti, Vice President and General Manager, Google Cloud in a recent Thales Security Sessions podcast moderated by Neira Jones. These trends are: The massive amount of data produced by organizations.

Cloud 123

Cloud Security Encryption Insurance 123

IT Governance

SEPTEMBER 1, 2022

In a month that saw the former US president accused of misappropriating classified government documents, there were also a spate of malicious insiders compromising their employer’s systems. Data breaches. victim of a cyber attack (unknown) Berkshire Partners LLC announces data breach (unknown) United HealthCare Services, Inc.

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116

IT Governance

NOVEMBER 20, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. have notified 330,000 people that their personal data might have been compromised as part of the MOVEit Transfer data breach.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Thales Cloud Protection & Licensing

AUGUST 3, 2021

Protecting Medical Data Against a Cyber-Attack Pandemic. Patient records were always valued by attackers for launching sophisticated insurance fraud schemes, purchasing medical supplies or drugs, or committing other types of fraud including identity theft. Tue, 08/03/2021 - 09:44. Such was the case with the COVID-19 pandemic.

IoT 71

IoT Encryption Cloud Compliance 71

eSecurity Planet

SEPTEMBER 14, 2022

A major focus of cybersecurity as an industry is its efforts to detect, root out, and respond to potential fraudsters attempting to trick companies and people out of their money, data, or both. According to data from the Federal Reserve , the 55-69 age group currently controls 41.2% So why do scammers go after older individuals more?

Energy and Utilities 120

Energy and Utilities Phishing Blockchain Cybersecurity 120

Krebs on Security

OCTOBER 28, 2020

The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of customers globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually.

Ransomware 341

Ransomware Security Agriculture Cybersecurity 341

Thales Cloud Protection & Licensing

FEBRUARY 15, 2023

The problem is that businesses are not yet aware of double or triple extortion ransomware and how these tactics can affect their data protection strategies. Any organization that directly holds vast amounts of data or holds client, supplier, or partner information is vulnerable to double extortion attacks.

Ransomware 71

Ransomware Encryption Security awareness Cybersecurity 71

IT Governance

MAY 2, 2023

Welcome to our April 2023 list of data breaches and cyber attacks. You can find the full list of data breaches and cyber attacks below, along with our rundown of the biggest incidents of the month. Biggest data breaches of April 2023 1. million people.

Data breaches 105

Data breaches Ransomware Personal data Access 105

Security Affairs

APRIL 8, 2020

The drug testing firm Hammersmith Medicines Research LTD (HMR), which performs live trials of Coronavirus vaccines, discloses a data breach. Stolen data included the personal information for volunteers who surnames begin with D, G, I, or J. ” reads the data breach notification published by the company.

Ransomware 102

Ransomware Data breaches Encryption Financial Services 102

eSecurity Planet

FEBRUARY 11, 2022

The simplest example may be insurance. Life, health, auto, and other insurance are all designed to help a person protect against losses. Cybersecurity should follow a layered approach, with additional protections for the most important assets, such as corporate and customer data. Mapping Environment Data.

Risk 141

Risk Cybersecurity Encryption Access 141

eSecurity Planet

OCTOBER 18, 2021

In an interview with eSecurity Planet , Daryl Crockett, CEO of data management company ValidDatum, said the case has the potential to be a game-changer regarding corporate responsibility for the impact of ransomware. ” Cyber Insurance No Longer Reliable. “And the war can be multi-pronged.

Ransomware 103

Ransomware Insurance Digital transformation Cybersecurity 103

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. What Encryption Is and How It Relates to Cryptology The science of cryptography studies codes, how to create them, and how to solve them. How Does Encryption Process Data?

Encryption 112

Encryption IT Passwords IoT 112

Security Affairs

SEPTEMBER 23, 2023

MILES/CBS NEWS TEXAS The Royal ransomware group is behind the attack and threatens to publish stolen data if the City will not meet its ransom demand. Between April 7, 2023, and May 4, 2023, Royal performed data exfiltration and ransomware delivery preparation activities. ” continues the report.

Ransomware 102

Ransomware Encryption Systems administration Cybersecurity 102

Information Governance Perspectives

MARCH 20, 2020

I was recently interviewed for an article on Data Governance & Privacy for a number of periodicals including Info Risk Today on “Data Governance: How to Tackle 3 Key Issues: The Importance of Accountability, Data Inventory, and Automation. What are the two main challenges of data governance?

Government 40

Government Privacy Compliance Digital transformation 40

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.

Insurance 90

Insurance Government Cybersecurity Risk 90

eSecurity Planet

OCTOBER 5, 2021

Malware has been around for nearly 40 years, longer even than the World Wide Web, but ransomware is a different kind of threat, capable of crippling a company and damaging or destroying its critical data. Zero trust is an important new tool to add to all that, essentially walling off your most important data. Data backup.

Ransomware 139

Ransomware Encryption Cybersecurity Insurance 139

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Third-party governance. Like other competitive GRC solutions, it speeds the process of aggregating and mining data, building reports, and managing files.

Compliance 57

Compliance Risk Government Retail 57

The Last Watchdog

OCTOBER 5, 2023

Adding to this will be very smart uses of generative AI – centered around wisely directing LLM capacities onto specific data lakes containing threat intelligence information. Erin: Do you think cyber insurance should play a bigger role in companies’ cybersecurity strategies? Leadership should prioritize cybersecurity at all levels.

Cybersecurity 204

Cybersecurity Privacy Cloud IoT 204

Data Matters

OCTOBER 12, 2021

Death, taxes and data breaches. These threats lead to direct costs on victims, and these costs have also grown exponentially in recent years, as readers of the famed annual Ponemon data breach report well know. In 2021, the average total cost of a data breach rose to $4.24 The next closest industry was financial at $5.72

Data breaches 97

Data breaches Security Compliance Cloud 97