Security Affairs

JULY 21, 2021

Experts found a DB containing sensitive health insurance data belonging to customers of US insurance giant Humana. An SQL database containing what appears to be highly sensitive health insurance data of more than 6,000 patients has been leaked on a popular hacker forum.

Insurance 114

Insurance Passwords Libraries Access 114

Hunton Privacy

OCTOBER 14, 2014

The Department of Homeland Security concluded that these mergers introduced latent weaknesses into the company’s network, allowing hackers to go largely undetected for a significant period of time. The incident raises some issues for cyber insurance.

Insurance 40

Insurance Cybersecurity Manufacturing Information Security 40

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Data Protection Report

NOVEMBER 9, 2022

Defining Information Security Practices. As a first line of defence, the best way to mitigate against vendor breaches is to make sure the vendor is contractually required to maintain strong information security practices and policies that are in line with legal and industry-specific standards. Concluding Remarks.

Risk 117

Risk Cybersecurity Insurance Data breaches 117

Data Protection Report

APRIL 30, 2024

As indicated in the paragraph quoted above, the company collected some very sensitive personal information. Its privacy policy stated that the company would treat the data confidentially, and the company would not share data without user consent. pushing back on indefinite retention of information.

Personal data 85

Personal data Privacy Information governance Compliance 85

Data Matters

JANUARY 2, 2018

This past year was marked by ever more significant data breaches, growing cybersecurity regulatory requirements at the state and federal levels and continued challenges in harmonizing international privacy and cybersecurity regulations. As we begin this New Year, here is list of the top 10 privacy and cybersecurity issues for 2018: EU GDPR.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

Data Matters

JANUARY 28, 2022

Another example is the inclusion of remediation details for old vulnerabilities (including some dating back to 2018) and CISA stating that the Russian state-sponsored advanced persistent threat (“APT”) actors have used these “common but effective” vulnerabilities for attacks. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Hunton Privacy

JUNE 13, 2023

On June 6, 2023, the Federal Deposit Insurance Corporation (“FDIC”), the Board of Governors of the Federal Reserve System (“FRB”) and the Office of the Comptroller of the Currency (“OCC”) issued their final Interagency Guidance on Third-Party Relationships (“Guidance”).

Risk 64

Risk Insurance Compliance Information Security 64

Security Affairs

NOVEMBER 25, 2020

Safety is always paramount at Belden and we take threats to the privacy of personal and company information very seriously,” stated Roel Vestjens, president and CEO of Belden. “We We sincerely regret any inconvenience this situation may cause all impacted individuals.”

Data breaches 103

Data breaches Manufacturing Insurance Access 103

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

eSecurity Planet

DECEMBER 9, 2021

For example, we might nominate: The IT security manager to handle a ransomware incident; Our external accountant to investigate financial fraud; or. The building manager to handle threats to physical security at a specific office. Be in-line with insurance policies. Be in-line with insurance policies.

Insurance 121

Insurance Ransomware Data breaches Cloud 121

IBM Big Data Hub

JULY 7, 2023

Data protection and data privacy Data protection , defined as protecting important information from corruption, damage or loss, is critical because data breaches resulting from cyberattacks can include personally identifiable information (PII), health information, financial information, intellectual property and other personal data.

Security 40

Security Data breaches Data Privacy Compliance 40

Krebs on Security

DECEMBER 18, 2018

Virtually all companies like to say they take their customers’ privacy and security seriously, make it a top priority, blah blah. That’s because very few of the world’s biggest companies list any security executives in their highest ranks. Source: Accenture.

Security 221

Security Marketing Cybersecurity Data breaches 221

Data Matters

MAY 17, 2018

SB 315 faced opposition from both private companies and information security researchers. Senate subcommittee on consumer protection, product safety, insurance, and data security to question Uber’s chief information security officer about its bug bounty program and its reported $100,000 payment to the intruders.

Systems administration 60

Systems administration Cybersecurity Information Security Insurance 60

Data Matters

DECEMBER 10, 2019

Data privacy issues: Cyberattacks often involve identity theft. Insurance: The firm should communicate with its insurance company and review policy coverage. Insurance should be specifically evaluated with potential cyberattacks and data breach in mind.

Data breaches 60

Data breaches Insurance Authentication Risk 60

Data Matters

DECEMBER 10, 2019

Data privacy issues: Cyberattacks often involve identity theft. Insurance: The firm should communicate with its insurance company and review policy coverage. Insurance should be specifically evaluated with potential cyberattacks and data breach in mind.

Data breaches 60

Data breaches Insurance Authentication Risk 60

IT Governance

JANUARY 30, 2019

The GDPR considers personal data to be anything that identifies, or can be used to identify, a living person, such as your name, National Insurance number or email address (personal or work). Things get a little more complicated when you factor in that each piece of information doesn’t have to be taken on its own.

GDPR 86

GDPR Compliance Personal data Data breaches 86

The Security Ledger

SEPTEMBER 11, 2019

Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk Episode 159: Deep Fakes and Election (in)Security with ZeroFOX. That means that, for companies holding onto personally identifiable information, the cost of ignoring third party risk is growing. . Read the whole entry. »

Risk 40

Risk GDPR Data Privacy Personal data 40

DLA Piper Privacy Matters

FEBRUARY 28, 2022

An attack may come at any time of the day or night – so ensure that it is clear in the plan who has authority to make emergency out of hours decisions, for example as necessary to protect the wider global network. Check your cyber insurance policy. Also ensure you have contacts with cyber security intelligence services.

Passwords 98

Passwords Phishing Risk Access 98

Data Matters

AUGUST 5, 2019

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Hunton Privacy

JANUARY 6, 2010

On January 1, 2010, two important state data security and privacy laws took effect in Nevada and New Hampshire. The laws create new obligations for most companies that do business in Nevada and for health care providers and business associates in New Hampshire.

Privacy 40

Privacy Security Encryption Communications 40

Data Matters

FEBRUARY 10, 2022

For example, SEC guidance from 2018 emphasizes that there is a range of factors that may affect whether an incident should be disclosed to investors beyond the bottom-line financial costs to respond to the incident. 1 Chair Gary Gensler, Cybersecurity and Securities Laws , SEC (Jan. Public Companies and Service Providers.

Cybersecurity 88

Cybersecurity Marketing Risk Compliance 88

HL Chronicle of Data Protection

OCTOBER 21, 2019

Regulators, industry experts, and researchers provided insight into health privacy and security enforcement trends, emerging threats, and new tools at a recent conference focused on the Health Insurance Portability and Accountability (HIPAA) regulatory framework. NIST Privacy Framework.

Risk 40

Risk Compliance Privacy Phishing 40

Hunton Privacy

MAY 16, 2017

Virgin Islands have laws that require notification to affected individuals (and in some states, regulators) in the event of unauthorized acquisition of or access to personal information. Businesses must also be cognizant of cyber-related shareholder derivative lawsuits, which increasingly follow from catastrophic security breaches.

Ransomware 61

Ransomware Insurance Access Information Security 61

Hunton Privacy

FEBRUARY 12, 2014

However, in one notable change, the Framework no longer includes Appendix B, the “Methodology to Protect Privacy and Civil Liberties for a Cybersecurity Program.” Examples of subcategories include “[a]sset vulnerabilities are identified and documented” and “[o]rganizational information security policy is established.”

Cybersecurity 40

Cybersecurity Risk Insurance Privacy 40

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Data Matters

FEBRUARY 25, 2021

The FCA has provided new guidance for PIs and EMIs using the “insurance or comparable guarantee” method of safeguarding. This includes a requirement that the insurance policy or comparable guarantee must pay out for the full amount of any claim regardless of how the relevant insolvency event occurs (including if the firm is at fault).

Authentication 68

Authentication Paper Risk Insurance 68

Hunton Privacy

FEBRUARY 20, 2009

In the Consent Order, the FTC specifically highlighted CVS’s failure to render PHI unreadable before disposal as well as its claim in its privacy notice that maintaining the privacy of its customers’ PHI was central to its operations as examples of unfair or deceptive trade practices.

CMS 49

CMS Privacy Compliance Retail 49

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. Privacy governance and management. Riskonnect. Back to top.

Compliance 67

Compliance Risk Government Retail 67

Data Matters

NOVEMBER 16, 2017

Cybersecurity insurance was a relatively new—and far from prevalent—concept. For example, an FTC complaint recently filed in federal court (Federal Trade Commission v. The post M&A Due Diligence: The Devil in Their Data appeared first on Data Matters Privacy Blog.

Data breaches 60

Data breaches Cybersecurity Risk Compliance 60

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. Privacy governance and management. Riskonnect. Back to top.

Compliance 57

Compliance Risk Government Retail 57

IT Governance

JUNE 1, 2023

Meanwhile, you can subscribe to our Weekly Round-up to receive the latest cyber security news and advice delivered straight to your inbox. IT Governance is dedicated to helping organisations tackle the threat of cyber crime and other information security weaknesses. With that out of the way, it’s time to move on to May 2023.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

Hunton Privacy

NOVEMBER 1, 2010

Indiana Attorney General Greg Zoeller announced on October 29, 2010, that he has sued health insurer WellPoint, Inc. For example, Puerto Rico’s breach notification statute requires notification of certain breaches within 10 days of discovery. for alleged failure to provide timely notification of a data breach.

Data breaches 40

Data breaches Insurance Security IT 40

Hunton Privacy

NOVEMBER 19, 2013

At present, these include data users in the communications, banking and finance, insurance, health care, tourism and hospitality, transportation, education, direct sales, services, real estate and utilities sectors. Data users in these categories will have three months from November 15 to register.

Personal data 63

Personal data Marketing Communications Insurance 63

IT Governance

DECEMBER 27, 2019

IT Governance is closing out the year by rounding up 2019’s biggest information security stories. For example, customers might want to change passwords for other sites or check their bank account for signs of fraud. Part one covers January to June, and will be followed by part in the coming days.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Data Matters

AUGUST 17, 2021

On August 11, 2021, the Federal Financial Institutions Examination Council (FFIEC)1 issued guidance establishing risk management principles and practices to support the authentication of users accessing a financial institution’s information systems and customers accessing a financial institution’s digital banking services (the Guidance).

Authentication 88

Authentication Access Risk Financial Services 88

Hunton Privacy

FEBRUARY 12, 2013

The Cybersecurity Framework also may be used by secondary actors (such as insurance companies and auditors) to evaluate these risks. One example included in the Executive Order is the call for a review of the federal procurement process to create a preference for vendors who meet the Cybersecurity Framework standards.

Cybersecurity 40

Cybersecurity Risk Compliance Government 40