Data Breach Today

OCTOBER 2, 2018

Health Insurer Slammed by Regulator for Failing to Detect Bulk Theft of Records The U.K.'s s data protection regulator has fined Bupa Insurance Services £175,000 ($228,000) for failing to stop an employee from stealing 547,000 customer records, which were later offered for sale on the dark web.

Insurance 202

Insurance Sales Security 202

Krebs on Security

APRIL 27, 2023

The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to access records that should only be available after logging in. A researcher found DC Health had five Salesforce Community sites exposing data. Huntington Bank has disabled the leaky TCF Bank Salesforce website. .”

Access 278

Access Authentication Information Security Communications 278

Security Affairs

JANUARY 2, 2024

Hudson Researchers reported that on December 20th, a hacker using the moniker ‘irleaks’ announced the availability for sale of over 160,000,000 records allegedly stolen from 23 leading insurance companies in Iran. The hacker also shared a sample of the data, which it available for a total price of $60,000.

Insurance 135

Insurance Sales Passwords Access 135

Data Breach Today

JANUARY 25, 2023

Former Bugcrowd, Cylance, Optiv, RSA Leader Focused on Expanding in Europe and Asia Privileged access management vendor Delinea has hired longtime RSA sales leader David Castignola to expand beyond North America as well as in nonregulated industries.

Financial Services 130

Financial Services Sales Insurance Access 130

Reltio

FEBRUARY 23, 2023

The data landscape has undergone tremendous transformation in the last two decades. Gone are the days when data was relegated to the IT department and buried in the basement. Over one-third of North American public companies now have a Chief Data Officer (CDO)—a role that did not even exist 20 years ago.

MDM 98

MDM Sales Insurance Marketing 98

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today. The user can accept or reject each use of their data individually.

Data Privacy 80

Data Privacy Privacy GDPR Personal data 80

Krebs on Security

MARCH 17, 2023

Federal Bureau of Investigation (FBI) this week arrested a New York man on suspicion of running BreachForums , a popular English-language cybercrime forum where some of the world biggest hacked databases routinely show up for sale. that suffered a data breach this month. Coelho was arrested in the United Kingdom on Jan. 31, 2022.

Sales 294

Sales Data breaches Insurance Access 294

Hunton Privacy

SEPTEMBER 21, 2023

362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. The Act would grant California consumers the right to request that data brokers (1) delete and (2) limit the further sale and sharing of consumers’ personal data.

Insurance 69

Insurance Personal data Sales Compliance 69

IT Governance

FEBRUARY 6, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Eye4Fraud database allegedly leaked – 14.9 Data breached: 14,900,000 lines. million unique records, with 9.4

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

JUNE 1, 2023

Welcome to our new-look list of data breaches and cyber attacks. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. In August 2020, it was embroiled in a data breach affecting more than 800,000 EyeMed and Lenscrafters patients.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

Data Breach Today

FEBRUARY 19, 2019

After Insurance, Fast-Food Chain's Breach Costs Are Nearly $34 Million Fast-food giant Wendy's has reached a $50 million settlement agreement with financial institutions that sued after attackers planted RAM-scraping malware on point-of-sale systems in 1,025 of its restaurants in 2015 and 2016, stealing massive quantities of payment card data.

Insurance 231

Insurance Sales IT 231

IT Governance

MARCH 5, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 183,754,481 records. EasyPark data breach: 21.1 million data records belonging to EasyPark have been listed for sale on a hacking forum.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

JUNE 12, 2021

Volkswagen America discloses a data breach at a third-party vendor that exposed the personal details of more than 3.3 Volkswagen America discloses a data breach suffered by a third-party vendor used by the car vendor for sales and marketing purposes. SecurityAffairs – hacking, data leak). million of its customers.

Data breaches 124

Data breaches Sales Insurance Marketing 124

Security Affairs

MARCH 25, 2021

Researchers discovered the availability in the DarK Web of 30M of records of Americans affected by the Astoria Company data breach. Collected data si shared with a number of partner sites (such as insurance or loan agencies), that pay per lead referral. DATABASE SALE ON DARKWEB MARKETS. ” continues the experts.

Data breaches 109

Data breaches Sales Insurance Marketing 109

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Data breached: 5 TB.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Security Affairs

JANUARY 4, 2022

Hospitality chain McMenamins disclosed a data breach after a recent ransomware attack. Hospitality chain McMenamins discloses a data breach after a ransomware attack that took place on December 12. According to the company, threat actors have stolen data of individuals employed between July 1, 2010, and December 12, 2021.

Data breaches 105

Data breaches Ransomware Insurance Sales 105

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 36 million records. Data breached: 6,935,412 individuals’ data. Data breached: 6.9 Only 3 definitely haven’t had data breached.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

FEBRUARY 1, 2023

Welcome to our January 2023 list of data breaches and cyber attacks. You can find the full list of data breaches and cyber attacks below. The new year comes with the promise of fresh beginnings and the promise to revolve the bad habits of our past, but we’ve had no such luck in the cyber security sector.

Data breaches 136

Data breaches Ransomware Insurance Government 136

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

NOVEMBER 1, 2022

Welcome to our October 2022 review of data breaches and cyber attacks. By contrast, comparatively little personal data was breached, with our figures confirming that at least 9,990,855 records were compromised. For now, it’s unclear what damage the data could cause if exposed, so we’ve omitted the figure from our tally.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

The Last Watchdog

AUGUST 19, 2021

At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons. Once more, a heavily protected enterprise network has been pillaged by data thieves. it’s notable that T-Mobile only learned about the breach when the data went up for sale.

Data breaches 306

Data breaches Authentication Access Personal data 306

IT Governance

AUGUST 3, 2020

After mammoth amounts of personal data were leaked in May and June, we’ve seen a reversion to the mean this month. You can find our full list of publicly disclosed data breaches from July in this blog. Bitcoin scam leaks personal data of users from across the globe (248,926). Cyber attacks.

Data breaches 141

Data breaches Insurance Ransomware Personal data 141

Krebs on Security

MAY 31, 2019

That measure, which went into effect in March 2019 and is considered among the toughest in the nation, requires financial companies to regularly audit and report on how they protect sensitive data, and provides for fines in cases where violations were reckless or willful. ” . ”

Financial Services 203

Financial Services Insurance Sales Authentication 203

Krebs on Security

APRIL 12, 2022

Department of Justice (DOJ) said today it seized the website and user database for RaidForums , an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches since 2015. Not all of those undercover buys went as planned.

Sales 216

Sales Data breaches Government Access 216

Security Affairs

MARCH 17, 2024

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 109

Data breaches Security Computer and Electronics Ransomware 109

CGI

NOVEMBER 10, 2016

The growing importance of dynamic pricing and rating in insurance. On June 20, 2016, CGI held a roundtable discussion on dynamic rating and pricing in the insurance industry that involved nearly all major Dutch insurers. From this position, pricing can be optimized to maximize sales and margins. Fri, 11/11/2016 - 01:07.

Insurance 69

Insurance Retail Sales Risk 69

Collibra

JANUARY 27, 2022

Its impact is far reaching and global, requiring insurance companies of all types and sizes, bancassurance and any entity that sells insurance products to comply with stringent IFRS-17 rules and comprehensive reporting guidelines. How can Collibra Data Intelligence Cloud help accelerate IFRS-17 compliance?

Compliance 52

Compliance Cloud Insurance Metadata 52

Hunton Privacy

APRIL 18, 2023

The bill also contains a number of exemptions, including exceptions for financial institutions, affiliates, and data subject to Title V of the Gramm-Leach-Bliley Act, covered entities and business associates under the Health Insurance Portability and Accountability Act of 1996, nonprofit organizations and institutions of higher education.

Privacy 132

Privacy Personal data Sales Insurance 132

Data Matters

JUNE 22, 2022

Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

Security Affairs

NOVEMBER 11, 2022

An initial access broker claims to have hacked Deutsche Bank and is offering access to its systems for sale on Telegram. A threat actor ( 0x_dump ) claims to have hacked the multinational investment bank Deutsche Bank and is offering access to its network for sale online. Also internal network filters TCP,UDP,HTTP & HTTPS.

Access 96

Access Sales Communications Insurance 96

IT Governance

DECEMBER 1, 2022

Welcome to our November 2022 review of data breaches and cyber attacks. The first was a data breach at Twitter, in the latest PR disaster for the social media giant. The second was a cyber attack on the Russian scooter-sharing service Whoosh, which was discovered after customers’ data was put up for sale on the dark web.

Data breaches 115

Data breaches Ransomware Personal data Insurance 115

Data Protection Report

MARCH 7, 2024

China Cuba Iran North Korea Russia Venezuela What is “personally identifiable data” that is “in combination with each other”? These proposed regulations generally address only Section 2 of the Executive Order. Which countries are “countries of concern”? Note that the only difference between the two examples is the addition of IP addresses.

Access 57

Access Military Compliance Personal data 57

Security Affairs

DECEMBER 1, 2020

TB of confidential data. The CyberNews investigation team discovered an unsecured, publicly accessible Kibana dashboard of an ElasticSearch database containing confidential data belonging to Apodis Pharma , a software company based in France. The archives include product data like product quantities and IDs, as well as warehouse data.

Healthcare 95

Healthcare Archiving Sales Access 95

Hunton Privacy

MARCH 24, 2022

following California, Virginia and Colorado, to enact a consumer data privacy law, the Utah Consumer Privacy Act (the “UCPA”). Notably, the UCPA adopts the VCDPA’s more narrow definition of “sale,” which is limited to the exchange of personal data for monetary consideration by a controller to a third party.

Privacy 113

Privacy Personal data Sales B2B 113

IT Governance

AUGUST 2, 2021

Data breaches. dealer data breach (100,000) Hacker gets thousands of confidential data on LimeVPN users (69,400) Breach of data in Public Distribution System of Tamil Nadu (5.2 Cyber attacks. Ransomware. Financial information. Malicious insiders and miscellaneous incidents. In other news…. Cyber attacks. Find out more.

Data breaches 105

Data breaches Ransomware Insurance Personal data 105

Data Protection Report

APRIL 7, 2022

A third regulator has recently entered into a proposed consent that includes a $500,000 fine based in part on a company’s over-retention of personal data for longer than it was needed. The first regulator was the French data protection authority, the CNIL, in 2021, which we wrote about here.

Privacy 112

Privacy Compliance Insurance Data collection 112