Security Affairs

JANUARY 19, 2024

American global apparel and footwear company VF Corp revealed that the December data breach impacted 35.5 “Based on VF’s preliminary analysis from its ongoing investigation, VF currently estimates that the threat actor stole personal data of approximately 35.5 million customers. In 2015, the company controlled 55% of the U.S.

Data breaches 111

Data breaches Passwords Retail Insurance 111

Hunton Privacy

AUGUST 6, 2019

On August 2, 2019, New Hampshire Governor Chris Sununu signed into law SB 194 (the “Bill”), which requires insurers licensed in the state (“licensees”) to put in place data security programs and report cybersecurity events. These certifications, including supporting records, schedules and data, must be kept for a period of five years.

Insurance 81

Insurance Security Cybersecurity Information Security 81

Krebs on Security

AUGUST 3, 2020

A California company that helps telemarketing firms avoid getting sued for violating a federal law that seeks to curb robocalls has leaked the phone numbers, email addresses and passwords of all its customers, as well as the mobile phone numbers and other data on people who have hired lawyers to go after telemarketers.

Marketing 311

Marketing Passwords Sales Insurance 311

Security Affairs

DECEMBER 11, 2023

Toyota Financial Services (TFS) disclosed a data breach, threat actors had access to sensitive personal and financial data. Toyota Financial Services (TFS) is warning customers it has suffered a data breach that exposed sensitive personal and financial data. Affected customers have now been informed.

Financial Services 109

Financial Services Data breaches Ransomware Insurance 109

Adam Levin

MARCH 26, 2020

Cyber insurance is still evolving, and as such you can still get good deals even if your cybersecurity is not completely up to snuff. Each has reported—or worse have been discovered to have—extremely sensitive customer data stored on cloud servers that were not properly secured. This is about how data is handled in the cloud.

Insurance 84

Insurance Passwords Cloud Risk 84

Security Affairs

JANUARY 2, 2024

Hudson Researchers reported that on December 20th, a hacker using the moniker ‘irleaks’ announced the availability for sale of over 160,000,000 records allegedly stolen from 23 leading insurance companies in Iran. The hacker also shared a sample of the data, which it available for a total price of $60,000.

Insurance 131

Insurance Sales Passwords Access 131

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July. Pierluigi Paganini.

Insurance 85

Insurance Data breaches Financial Services Passwords 85

IT Governance

JUNE 1, 2023

Welcome to our new-look list of data breaches and cyber attacks. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. In August 2020, it was embroiled in a data breach affecting more than 800,000 EyeMed and Lenscrafters patients.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

Security Affairs

JULY 21, 2021

Experts found a DB containing sensitive health insurance data belonging to customers of US insurance giant Humana. An SQL database containing what appears to be highly sensitive health insurance data of more than 6,000 patients has been leaked on a popular hacker forum. Who had access to the data?

Insurance 113

Insurance Passwords Libraries Access 113

Data Protection Report

OCTOBER 3, 2021

Effective October 1, 2021, an amendment [1] to the Connecticut General Statute concerning data privacy breaches, Section 36a-701b, will impact notification obligations in several significant ways. 60-Day Notification Window.

Data breaches 142

Data breaches IT Insurance Passwords 142

DLA Piper Privacy Matters

MARCH 6, 2020

The PFI Guidelines will apply to regulated banks, financial institutions and insurance companies. transaction logs, transaction amount, insurance orders, insurance claims); user’s personal and financial information (e.g. Personal financial information (“PFI”) is widely defined. name, sex, nationality, etc.),

Insurance 52

Insurance Security Passwords Encryption 52

eSecurity Planet

FEBRUARY 11, 2021

This creates a lot of opportunities for hackers to gain access to company resources because users often reuse passwords or mirror patterns in creating them. The recent boom in remote work due to the Covid-19 pandemic has further amplified the need to secure network endpoints , in which effective password management plays a big role.

Passwords 52

Passwords Encryption Authentication Cloud 52

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. In other words, bad actors glean lists of breached usernames and passwords and run them against desired logins until they find some that work. ” said Gal. ” said Gal.

Data breaches 87

Data breaches Passwords Insurance Access 87

Krebs on Security

NOVEMBER 19, 2021

In reality, the fraudster initiates a transaction — such as the “forgot password” feature on the financial institution’s site — which is what generates the authentication passcode delivered to the member. The fraudster then uses Zelle to transfer the victim’s funds to others.

IT 353

IT Passwords Authentication Phishing 353

Security Affairs

MAY 13, 2020

Magellan Health, a for-profit managed health care and insurance firm, was the victim of a ransomware attack. Magellan Health is a for-profit managed health care and insurance firm that ranks 417 on the Fortune 500 list of the largest US corporations by total revenue. ” reads the data breach notice issued by the company.

Data breaches 131

Data breaches Ransomware Insurance Passwords 131

IT Governance

MARCH 5, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 183,754,481 records. EasyPark data breach: 21.1 million data records belonging to EasyPark have been listed for sale on a hacking forum.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

SEPTEMBER 6, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. For more details about the year’s incidents, check out our new page, which provides a complete list of known data breaches and cyber attacks in 2023.

Data breaches 104

Data breaches Ransomware Insurance Privacy 104

Krebs on Security

FEBRUARY 19, 2020

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. How would your organization hold up to a password spraying attack?

Passwords 353

Passwords Access Insurance Government 353

The Last Watchdog

AUGUST 19, 2021

At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons. Once more, a heavily protected enterprise network has been pillaged by data thieves. it’s notable that T-Mobile only learned about the breach when the data went up for sale.

Data breaches 306

Data breaches Authentication Access Personal data 306

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. According to a listing on a popular hacking forum, the database includes customers’ names, email addresses, hashed passwords, and more. Data breached: 36 million records.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

FEBRUARY 1, 2023

Welcome to our January 2023 list of data breaches and cyber attacks. You can find the full list of data breaches and cyber attacks below. The new year comes with the promise of fresh beginnings and the promise to revolve the bad habits of our past, but we’ve had no such luck in the cyber security sector.

Data breaches 136

Data breaches Ransomware Insurance Government 136

Krebs on Security

AUGUST 17, 2023

For example, in 2019 McAfee found that for targets in Japan, the 16Shop kit would also collect Web ID and Card Password, while US victims will be asked for their Social Security Number.

Phishing 186

Phishing Passwords Insurance Sales 186

IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Hunton Privacy

JULY 1, 2022

In its consent order , the Department noted that the cybersecurity events had caused the exposure of a substantial amount of sensitive personal data belonging to Carnival’s customers, including those residing in New York. NYDFS also found that Carnival had failed to implement basic protocols to prevent data breaches.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

IT Governance

NOVEMBER 1, 2022

Welcome to our October 2022 review of data breaches and cyber attacks. By contrast, comparatively little personal data was breached, with our figures confirming that at least 9,990,855 records were compromised. For now, it’s unclear what damage the data could cause if exposed, so we’ve omitted the figure from our tally.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

IT Governance

FEBRUARY 21, 2019

This week, we discuss a security flaw affecting 1Password, Dashlane, KeePass and LastPass; the prevalence of historic vulnerabilities in corporate IT systems; the increase in formjacking attacks; and Wendy’s $50 million data breach settlement. Each password manager also attempted to scrub secrets from memory.

Passwords 76

Passwords Data breaches Retail Government 76

Hunton Privacy

APRIL 3, 2020

s data breach notification law (the “Bill”). Among other requirements, the Bill requires the provision of identity theft prevention services in certain data breaches, establishes a new regulatory reporting requirement in the event of a cognizable data breach affecting 50 or more residents of D.C., Harm Threshold.

Data breaches 84

Data breaches Security Insurance Passwords 84

Security Affairs

APRIL 8, 2021

Group-IB , a global threat hunting and adversary-centric cyber intelligence company, discovered that user data of the Swarmshop card shop have been leaked online on March 17, 2021. Cardshop users, however, were recommended to change the passwords shortly after the breach report came out. percent of which were issued by the US banks.

Passwords 107

Passwords Insurance Personal data Sales 107

eSecurity Planet

JULY 12, 2022

The first signs of the ransomware attack at data storage vendor Spectra Logic were reports from a number of IT staffers about little things going wrong at the beginning of the day. Cyber Insurer Provides Help. Also read: Top 8 Cyber Insurance Companies for 2022 Best Ransomware Removal and Recovery Services. Lessons Learned.

Ransomware 144

Ransomware Insurance Cybersecurity Passwords 144

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches.

Cybersecurity 93

Cybersecurity Ransomware Passwords Cloud 93

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

JANUARY 4, 2022

The Broward Health public health system disclosed a massive data breach that has impacted more than 1.3 The Broward Health public health system has suffered a data breach that impacted 1,357,879 individuals. The attack took place on October 15, 2021, when threat actors breached the hospital’s network and accessed patient data.

Data breaches 81

Data breaches Passwords Insurance Access 81

Krebs on Security

JANUARY 19, 2022

is perhaps better known as the online identity verification service that many states now use to help staunch the loss of billions of dollars in unemployment insurance and pandemic assistance stolen each year by identity thieves. These days, ID.me may require a recorded, live video chat with the person applying for benefits.

Access 363

Access Insurance Authentication Government 363

IT Governance

FEBRUARY 15, 2022

Cyber insurance will become more popular and more comprehensive. It’s led to a growing trend for organisations to purchase cyber insurance, which Forbes contributor Emil Sayegh believes will continue in 2022. This market squeeze will certainly affect the cyber insurance industry itself. “We

Security 142

Security Insurance Authentication Passwords 142

Security Affairs

JULY 21, 2023

Suzuki or otherwise, buying a new vehicle is an intense experience with complicated credit, insurance, documentation, and contracts. Think of all the data that you leave in a dealership, including the fact that you now own a brand-new car – which itself may be a potential target for criminals.

Manufacturing 88

Manufacturing Phishing Access Insurance 88

Krebs on Security

DECEMBER 8, 2022

The CLOP members said one tried-and-true method of infecting healthcare providers involved gathering healthcare insurance and payment data to use in submitting requests for a remote consultation on a patient who has cirrhosis of the liver. Encrypting sensitive data wherever possible. ” .

Ransomware 255

Ransomware Metadata Insurance Encryption 255

Hunton Privacy

NOVEMBER 14, 2022

Health insurance information : an individual’s health insurance policy number or subscriber number in combination with access code or other medical information that permits misuse of an individual’s health insurance benefits.

Insurance 55

Insurance Passwords Access Security 55