IT Governance

MAY 30, 2019

which breached sixteen years’ worth of insurance data. Sunderland City Council launches investigation after library users’ personal data hacked (45). Graphic design firm Canva hit by massive data breach (139 million). Hackers breach the Philippines United Student Financial System for Tertiary Education (unknown).

Data breaches 112

Data breaches Personal data Ransomware Phishing 112

IT Governance

MARCH 2, 2020

Preschool services provider Educational Enrichment Systems discloses cyber attack (unknown). Altice USA employees’ data stolen in phishing attack (12,000). Puerto Rico government loses $2.6 Wake County, NC, learns that third party breached government employee info (1,900). million in phishing scam (unknown). Ransomware.

Data breaches 145

Data breaches Ransomware Phishing Personal data 145

IT Governance

FEBRUARY 8, 2018

Of the businesses surveyed, those in the finance and insurance industries had the highest levels of awareness (79%), followed by information and communications (67%) and education (52%). And as these figures show many organisations still need to act to make sure the personal data they hold is secure.

GDPR 63

GDPR Government Education Compliance 63

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Data breached: >33,000,000 people’s data. Compromised information varies from person to person.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

SEPTEMBER 1, 2021

Data breaches. Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me If you find yourself facing a cyber security disaster, IT Governance is here to help. Cyber attacks.

Data breaches 140

Data breaches Ransomware Insurance Data migration 140

eSecurity Planet

AUGUST 9, 2022

The GDPR provision that may keep IT security teams busiest is Article 32, which requires “a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing” of personal data. GDPR-style data privacy laws came to the U.S.

Data Privacy 142

Data Privacy Compliance Privacy Security 142

IT Governance

NOVEMBER 17, 2022

The Australian health insurance giant fell victim to ransomware in October, as a result of which the personal data of 9.7 In most cases, basic personal information – such as their name, date of birth, email address, phone number and gender – was exposed. million current and former customers was compromised.

IT 107

IT Ransomware Security Data breaches 107

IT Governance

MAY 2, 2023

Shields Health Care Group The largest data breach of April 2023 was at the Shields Health Care Group, a Massachusetts-based medical services provider. Reports emerged near the end of the month that a cyber criminal had gained unauthorised access to the organisation’s systems and had stolen the personal data of 2.3

Data breaches 105

Data breaches Ransomware Personal data Access 105

IT Governance

FEBRUARY 23, 2018

There is an alarming lack of awareness across all industries about the EU General Data Protection Regulation (GDPR) , according to a government survey. The finance and insurance (79%), information or communications (67%) and education (52%) sectors have the highest awareness of the GDPR.

GDPR 63

GDPR Compliance Insurance Personal data 63

IT Governance

MARCH 1, 2022

First, Russia targeted banks and government departments, then Ukraine hit back, attacking the Moscow stock exchange. If you find yourself facing a cyber security disaster, IT Governance is here to help. The post List of data breaches and cyber attacks in February 2022 – 5.1 Malicious insiders and miscellaneous incidents.

Data breaches 134

Data breaches Ransomware Government Blockchain 134

IT Governance

SEPTEMBER 1, 2020

Toronto residents’ CERB payments on hold after fraudulent employment insurance claims (700) Kentucky’s unemployment system suffers another breach (unknown) Defence supplier PULAU Corporation says it has been hacked (unknown) American Payroll Association notifying those affected by cyber attack (unknown). Cyber attacks. Hitachi Chemical Co.

Data breaches 122

Data breaches Ransomware Insurance Manufacturing 122

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

JULY 5, 2022

Welcome to our July 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over their personal data. It added: “We are working with local law enforcement, GEMA, GBI, and insurance officials to recover the funds. Get started.

Phishing 116

Phishing e-Delivery Retail Insurance 116

IT Governance

APRIL 11, 2023

Welcome to our April 2023 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. You can help educate your staff with IT Governance’s Phishing Staff Awareness Training Programme.

Phishing 114

Phishing Passwords Ransomware Insurance 114

Data Protection Report

JANUARY 4, 2024

a. Which one does NOT require a minimum number of residents’ personal data for the “controller” to be in-scope for the law? See SEC, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, 88 Fed. b. Which one makes most non-profits subject to its provisions? b (within 2 hours).

Privacy 109

Privacy Cybersecurity Artificial Intelligence e-Discovery 109

IT Governance

JANUARY 30, 2019

Data protection under the GDPR looks like this: there are data subjects (that’s individuals like you and me), and we own our own personal data. The GDPR provides EU residents with eight data subject rights , and everybody needs to be aware of them to make sure that organisations are collecting our data legally.

GDPR 86

GDPR Compliance Personal data Data breaches 86

Schneier on Security

NOVEMBER 8, 2017

Additionally, I am a Fellow and Lecturer at the Harvard Kennedy School of Government --where I teach Internet security policy -- and a Fellow at the Berkman-Klein Center for Internet and Society at Harvard Law School. Regarding Equifax, few consumers have any idea what the company knows about them, who they sell personal data to or why.

Personal data 83

Personal data Computer and Electronics Privacy Data breaches 83

Hunton Privacy

NOVEMBER 19, 2013

On November 14, 2013, the Minister of the Malaysian Communications and Multimedia Commission (the “Minister”) announced that Malaysia’s Personal Data Protection Act 2010 (the “Act”) would be going into effect as of November 15, marking the end of years of postponements. The law imposes a number of generally applicable principles.

Personal data 63

Personal data Marketing Communications Insurance 63

eSecurity Planet

JUNE 16, 2022

These new attacks affect everything from private citizens and businesses to government systems; healthcare organizations; public services; and food, water, and fuel supply chains. Other techniques to steal personal data include the use of keyloggers that record all keystrokes and can reveal information. Crimeware and spyware.

Ransomware 142

Ransomware Cybersecurity Phishing Encryption 142

IBM Big Data Hub

JULY 7, 2023

Data protection and data privacy Data protection , defined as protecting important information from corruption, damage or loss, is critical because data breaches resulting from cyberattacks can include personally identifiable information (PII), health information, financial information, intellectual property and other personal data.

Security 40

Security Data breaches Data Privacy Compliance 40

DLA Piper Privacy Matters

APRIL 23, 2020

These are defined as “decisions that result in the provision or denial of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities such as food and water, or that impact civil rights of individuals.”

Privacy 52

Privacy Government Insurance IT 52

eDiscovery Daily

DECEMBER 3, 2017

In 1980, in an effort to create a comprehensive data protection system throughout Europe, the Organization for Economic Cooperation and Development (OECD) issued its “Recommendations of the Council Concerning Guidelines Governing the Protection of Privacy and Trans-Border Flows of Personal Data.”.

GDPR 44

GDPR IT Personal data Privacy 44

IT Governance

JUNE 1, 2023

So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. IT Governance is dedicated to helping organisations tackle the threat of cyber crime and other information security weaknesses. million people.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 79

GDPR Privacy Sales Data breaches 79

Hunton Privacy

DECEMBER 15, 2017

Injuries 101 : The first panel discussed negative outcomes that arise from unauthorized access to and misuse of consumers’ personal data. Potential Factors in Assessing Injury : The second panel discussed potential factors in assessing consumer injury, including types of injury, magnitude and the sensitivity of consumer data.

Privacy 42

Privacy Retail Risk Insurance 42

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 60

GDPR Privacy Sales Data breaches 60

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

JANUARY 3, 2024

TB exfiltrated Comcast Cable Communications, LLC (Xfinity) Source 1 ; source 2 (New) Telecoms USA Yes 35,879,455 Tecnoquadri Srl Source (New) Manufacturing Italy Yes 33,000,000 Asia Insurance Co.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

IT Governance

JANUARY 23, 2024

Source (New) Real estate USA Yes 46,906 Hampton-Newport News Community Services Board Source 1 ; source 2 ; source 3 (New) Healthcare USA Yes 44,312 Air Methods Source 1 ; source 2 (New) Healthcare USA Yes 34,016 GREYHOURS Source (New) Retail France Yes 18,700 Groveport Madison Schools Source 1 ; source 2 ; source 3 (Update) Education USA Yes 15.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MARCH 5, 2024

Known data breached Pure Incubation Ventures Source (New) Professional services USA Yes 183,754,481 EasyPark Source 1 ; source 2 ; source 3 (Update) Software Sweden Yes 21,100,000 Cutout.Pro Source (New) Software Hong Kong Yes 19,972,829 Optum Source 1 ; source 2 (New) Healthcare USA Yes 6 TB Kumagai Gumi Group Co.,

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Data Protection Report

MARCH 7, 2024

The proposed definition of “listed identifier” is Full or truncated government identification or account number (such as a Social Security Number, driver’s license or state identification number, passport number, or Alien Registration Number) [Note that this definition apparently includes truncated Social Security Numbers.]

Access 57

Access Military Compliance Personal data 57

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Compromised information includes patients’ personal data, health and medical records, financial data, internal emails and software source code. Data breached: 5 TB.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

NOVEMBER 7, 2022

Welcome to our November 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Elsewhere, we assess data breaches at a cancer research facility and the US retailer Bed Bath & Beyond. Get started.

Phishing 119

Phishing Retail Data breaches Insurance 119

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA governs how businesses treat “consumer” “personal information.” The CCPA defines “personal information” broadly to include information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” .);

Privacy 58

Privacy Sales Education Compliance 58

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

The CCPA governs how businesses treat “consumer” “personal information.” The CCPA defines “personal information” broadly to include information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” .);

Privacy 58

Privacy Sales Compliance Cybersecurity 58