IT Governance

JUNE 1, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. Also be sure to check out our new page, which provides a complete list of data breaches and cyber attacks for 2023.

Data breaches 98

Data breaches Ransomware Insurance Personal data 98

IT Governance

DECEMBER 19, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. We’re also introducing two new categories this week: ‘AI’ and ‘Key dates’. Data breached: personal data belonging to 14,690,284 individuals. Data breached: 8 TB.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 3, 2023

December can be the best or worst time to suffer a data breach. On the one hand, people have started to wind down to the end of the year, all attention is on holidays and a data breach is more likely to fall under the data. But for the very same reasons, a December data breach can be the worst possible scenario.

Data breaches 115

Data breaches Ransomware e-Discovery Insurance 115

IT Governance

AUGUST 1, 2022

Welcome to our July 2022 review of data breaches and cyber attacks. You can find the full list below, broken into categories. Meanwhile, be sure to subscribe to our Weekly Round-up to receive the latest cyber security news and advice delivered straight to your inbox. Cyber attacks. Data breaches. Ransomware.

Data breaches 119

Data breaches Ransomware Insurance Access 119

IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The ‘enforcement’ and ‘other news’ categories remain unchanged. The data contains more than 56 million records, some of which are duplicates.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

DECEMBER 1, 2022

Welcome to our November 2022 review of data breaches and cyber attacks. The first was a data breach at Twitter, in the latest PR disaster for the social media giant. The second was a cyber attack on the Russian scooter-sharing service Whoosh, which was discovered after customers’ data was put up for sale on the dark web.

Data breaches 115

Data breaches Ransomware Personal data Insurance 115

IT Governance

JUNE 30, 2022

Welcome to our June 2022 review of data breaches and cyber attacks. You can find the full list below, broken down into categories. Meanwhile, be sure to subscribe to our Weekly Round-up to receive the latest cyber security news and advice delivered straight to your inbox. Cyber attacks. Data breaches.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

IT Governance

JULY 4, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. Also be sure to check out our new page, which provides a complete list of data breaches and cyber attacks for 2023.

Data breaches 96

Data breaches Ransomware Government Insurance 96

Hunton Privacy

OCTOBER 25, 2022

million fine to Interserve Group Limited for failing to keep employee personal data secure, which violates Article 5(1)(f) and Article 32 of the EU General Data Protection Regulation (“GDPR”), during the period of March 2019 to December 2020. On October 24, 2022, the UK Information Commissioner’s Office (“ICO”) issued a £4.4

Security 97

Security Personal data GDPR Insurance 97

Hunton Privacy

FEBRUARY 5, 2020

As previously posted on our Hunton Insurance Recovery blog , a Maryland federal court awarded summary judgment to policyholder National Ink in National Ink and Stitch, LLC v. This is significant because it demonstrates that insureds can obtain insurance coverage for cyber attacks even if they do not have a specific cyber insurance policy.

Computer and Electronics 52

Computer and Electronics Ransomware Insurance Access 52

Data Protection Report

OCTOBER 17, 2022

In July of this year, the Office of the Superintendent of Financial Institutions (OSFI) released the final version of its Guideline B-13 (the Guideline), setting out technology and cyber risk management expectations for all federally regulated financial institutions (FRFIs), such as banks, insurance and trust companies.

Risk 64

Risk Insurance Cybersecurity Government 64

KnowBe4

APRIL 25, 2023

You can upload your own SCORM training modules into your account for home workers Active Directory or SCIM Integration to easily upload user data, eliminating the need to manually manage user changes Find out how 55,000+ organizations have mobilized their end users as their human firewall.

Insurance 72

Insurance Security awareness Phishing Ransomware 72

The Last Watchdog

JANUARY 30, 2019

Late last year, Atrium Health disclosed it lost sensitive data for some 2.65 The culprit: lax practices of a third-party data and analytics contractor. One might assume top-tier financial services firms and healthcare vendors would have solved third-party cyber exposures by now. Uphill battle.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Data Protection Report

AUGUST 29, 2017

Earlier this month, Delaware revamped its data breach notification law, with changes to go into effect April 14, 2018. Most notably, the new law requires any entity that has suffered a data breach that includes social security numbers to provide free credit monitoring services to affected residents for one year.

Data breaches 40

Data breaches Insurance Encryption Passwords 40

DLA Piper Privacy Matters

DECEMBER 3, 2021

The United Arab Emirates (“UAE”) has enacted its long awaited federal level data protection law. 45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. This article examines some of its key features. What does the PDPL cover and who does it apply to? Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

eSecurity Planet

JANUARY 11, 2022

Investors, business clients, and more continue to look for secure application access for remote workers , provide real-time visibility into cyberattacks, and protect data as it travels from the cloud to edge networks and end-users and back. It uses this data to show a complete narrative of an attack in real-time. Open Raven.

Cybersecurity 142

Cybersecurity Cloud Compliance Analytics 142

DLA Piper Privacy Matters

NOVEMBER 6, 2019

On 30 October 2019, the Berlin Commissioner for Data Protection and Freedom of Information ( Berliner Beauftragte für Datenschutz und Informationsfreiheit – “ Berlin DPA ”) imposed an administrative fine of about EUR 14.5 million against Deutsche Wohnen SE for infringements of the General Data Protection Regulation (GDPR).

GDPR 98

GDPR Personal data Archiving Compliance 98

DLA Piper Privacy Matters

OCTOBER 25, 2022

The ICO found that Interserve had failed to put appropriate technical and organisational measures in place to secure personal data (in contravention of Articles 5(1)(f) and 32 GDPR) for a period of ~20 months. The attacker then compromised four HR databases containing data of 113k employees and former employees. The Incident.

Security 52

Security GDPR Personal data Insurance 52

Data Protection Report

AUGUST 8, 2017

2 AZR 681/16) that the use of evidence obtained through the use of key logger software is not permitted under current German privacy law, if there is no suspicion of a criminal offense. Hence, monitoring of employees without cause will most likely remain unlawful under privacy laws as interpreted by German courts and authorities.

Computer and Electronics 40

Computer and Electronics Insurance Privacy GDPR 40

eSecurity Planet

DECEMBER 9, 2021

Unfortunately for those of us indulging in wishful thinking, the likelihood and costs of data breaches continue to increase. The Ponemon Institute estimates that data breach costs rose to an average cost of $4.24 Be in-line with insurance policies. Be in-line with insurance policies. Yet, it can get worse.

Insurance 122

Insurance Ransomware Data breaches Cloud 122

ARMA International

FEBRUARY 21, 2020

Once connected, data can be exchanged, and the body and device can be remotely monitored and controlled.” On the downside, because of their almost constant presence, the devices can facilitate an all-encompassing capture of personal information, intended and unintended, which, for example, can run afoul of workplace privacy laws.

Computer and Electronics 105

Computer and Electronics Privacy Artificial Intelligence IoT 105

Thales Cloud Protection & Licensing

FEBRUARY 9, 2023

The Threat Offensive Whenever large groups of people get together, physical and cyber security systems should be on high alert. The cyber-offensive opportunities surrounding this year’s game will likely fall into the following categories: 1.Identity Data Security Identity & Access Management Tammy Wood | Sr.

Security 71

Security Authentication Phishing Access 71

Data Protection Report

AUGUST 3, 2017

. ————————————— Norton Rose Fulbright nominated for Cyber Law Firm of the Year. Norton Rose Fulbright has been shortlisted for ‘Cyber law firm of the year’ at the Insurance Insider Cyber Ranking Awards 2017.

IoT 40

IoT Cybersecurity Insurance Marketing 40

DLA Piper Privacy Matters

NOVEMBER 19, 2018

The French supervisory authority (the CNIL) has been very active regarding DPIAs by developing online tools and assessment forms to provide step by step guidance to data controllers on how to conduct a DPIA. the processing is already covered by a record of processing held by the data protection officer, where applicable.

Data Privacy 40

Data Privacy IT GDPR Privacy 40

Data Protection Report

SEPTEMBER 11, 2017

Similarly, Repsol addresses ransomware in its 40-F filings as one of the cyber risk factors for the company. IBM’s most recent 10-K identifies ransomware as a cyber risk that could impact the company’s business by causing “the loss of access to critical data or systems.”. Ransomware incident disclosures.

Risk 40

Risk Ransomware Insurance Data breaches 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. CCPA Background. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Data Protection Report

AUGUST 16, 2017

On the 7 th August 2017, the UK’s Government Department for Digital, Culture, Media and Sport issued a Statement of Intent (the Statement ) outlining its planned reforms of the UK’s data protection laws which are to be implemented by the Data Protection Bill (the Bill ).

Government 40

Government GDPR Personal data Insurance 40

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. CCPA Background. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Education Compliance 58

Data Matters

FEBRUARY 10, 2022

However, Chair Gensler highlighted that disclosure regimes evolve over time and stated that he has asked the staff to make recommendations related to public companies’ cybersecurity practices and cyber risk disclosures as well as disclosures that must be made once cyberevents have occurred. Best Practices for Public Companies.

Cybersecurity 88

Cybersecurity Marketing Risk Compliance 88

KnowBe4

MARCH 14, 2023

CyberheistNews Vol 13 #11 | March 14th, 2023 [Heads Up] Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears Robert Lemos at DARKReading just reported on a worrying trend. In a recent report, data security service Cyberhaven detected and blocked requests to input data into ChatGPT from 4.2%

Phishing 87

Phishing Security Artificial Intelligence Security awareness 87

IT Governance

JANUARY 7, 2020

In our first review of 2020, we look at a new twist on a PayPal scam, and discuss data breaches at an IVF treatment facility and in the Singapore government. Personal data of staff at Singapore’s Ministry of Defence leaked after email attack. Latest PayPal phishing scam goes for more than just your login details.

Phishing 94

Phishing Passwords Access Government 94

Hunton Privacy

FEBRUARY 12, 2014

The Framework, which includes standards, procedures and processes for reducing cyber risks to critical infrastructure, reflects changes based on input received during a widely-attended public workshop held last November in North Carolina and comments submitted with respect to a preliminary version of the Framework that was issued in October 2013.

Cybersecurity 40

Cybersecurity Risk Insurance Privacy 40

KnowBe4

FEBRUARY 14, 2023

New data found in GreatHorn's 2023 State of Email Security report shows that this is exactly what's been happening in the last 12 months. When people realize the value of their data, they're more vigilant and protective of it," Watson says. Find out how adding PhishER can be a huge time-saver for your Incident Response team!

Phishing 82

Phishing Security awareness Compliance Risk 82

Data Matters

APRIL 23, 2018

The growing volume and severity of cyber-attacks directed against public companies has caught the attention of federal regulators and investors. More and more, directors are viewing cyber-risk under the broader umbrella of corporate strategy and searching for ways to help mitigate that risk.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

ARMA International

SEPTEMBER 27, 2021

Some technology trends such as real-time data analytics are ongoing, while others are more recent, such as blockchain. This part also discusses managing CS risks such as ransomware, privacy, change management, and user adoption. The Proof of Concept (PoC) can help inform the approach to develop the data migration strategy.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. The stated purpose of the new law is to give people more control over their personal data and make it easier to access it. Did we mention big data? What do we expect in terms of enforcement priorities?

GDPR 40

GDPR Personal data Compliance Data breaches 40