Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion.

Insurance 90

Insurance Government Cybersecurity Risk 90

IT Governance

MAY 2, 2023

Additionally, billing information, insurance numbers and other financial details were stolen in the attack. More worryingly, the same database contained usernames, email addresses and encrypted passwords. Million Records Breached appeared first on IT Governance UK Blog.

Data breaches 105

Data breaches Ransomware Personal data Access 105

IT Governance

DECEMBER 27, 2019

IT Governance is closing out the year by rounding up 2019’s biggest information security stories. This meant they weren’t encrypted, making them freely accessible to as many as 20,000 employees, most of whom had no legitimate reason to access the information. IT Governance released its final Weekly Podcast.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA governs how businesses treat “consumer” “personal information.” Thus, if a business encrypts the personal information of the consumer, and that information is stolen, there will be no private right of action under the CCPA. The business community is already lobbying the California legislature to narrow this definition.

Privacy 58

Privacy Sales Education Compliance 58

IT Governance

MARCH 5, 2024

Affected information includes users’ names, email addresses, IP addresses and encrypted passwords. TB Turtlemint Source (New) Insurance India Yes 1,800,000 Chunghwa Telecom Source (New) Telecoms Taiwan Yes 1.7 The threat actor, KryptonZambie, listed a 5.93

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87