Data Breach Today

NOVEMBER 24, 2023

Also: Advice for the Next White House Cyber Director; CISOs' Liability Concerns In the latest weekly update, the former federal CISO, Grant Schneider, joins three editors at ISMG to discuss important cybersecurity issues, including advice for the next White House cyber director, and liability concerns facing CISOs following SolarWinds and its CISO (..)

Security 284

Security Cybersecurity IT 284

Data Breach Today

JULY 21, 2021

Measure Requires Reporting Certain Cyber Incidents to CISA Within 24 Hours of Discovery A bipartisan group of senators introduced a federal breach notification bill Wednesday that would require federal agencies, federal contractors and organizations that are considered critical to U.S.

Security 335

Security 335

Data Breach Today

JULY 20, 2023

Program Expected to Modernize Country's Payment Systems FedNow, the Federal Reserve's first instant payment service, officially launched on Thursday.

246

246

Data Breach Today

MAY 19, 2022

Cybersecurity and Infrastructure Security Agency advises all federal agencies in the country to immediately patch and address two vulnerabilities - one with a critical CVSS score and the other with a high score - that affect at least five VMware products.

Cybersecurity 336

Cybersecurity Security 336

Data Breach Today

NOVEMBER 23, 2020

have introduced a bill designed to patch loopholes in the Federal Cybersecurity Enhancement Act of 2015 that they say allow federal agencies to easily avoid implementing required cybersecurity procedures. Lawmakers Want to Restrict Agencies From Postponing Security Measures Sen. Ron Wyden, D-Ore., Lauren Underwood, D-Ill.,

Cybersecurity 357

Cybersecurity Security 357

Data Breach Today

AUGUST 16, 2023

Tentative Order Issued in Consolidated Case Against Meta in Privacy Dispute A federal judge issued a tentative order allowing plaintiffs to continue suing social media giant Meta for allegedly intercepting sensitive health data through its web tracking Pixel tool embedded into patient portals and scheduling apps.

Privacy 245

Privacy IT 245

Data Breach Today

NOVEMBER 5, 2023

CMMC, Zero Trust, RMF and NIST SP 800-53 Can Help Mitigate Data Loss, Insider Risk Federal agencies and Defense Industrial Base organizations need to protect data.

Risk 197

Risk Cybersecurity Security 197

Data Breach Today

MARCH 31, 2022

65 Terabytes of Data Wiped Out, According to Reports Hackers have allegedly managed to breach the infrastructure belonging to Russia's Federal Air Transport Agency, or Rosaviatsiya, and wiped out its entire database and files consisting of 65TB of data, including documents, files, aircraft registration data and emails from the servers.

IT 296

IT 296

Data Breach Today

MAY 22, 2021

Russian Federal Executive Authorities Hit by Cyberattacks in 2020 An unidentified nation-state hacking group targeted several Russian federal agencies as part of part of cyberespionage campaign that compromised the country’s federal networks to steal sensitive data, according to a report released by Russian security firm Solar JSOC.

Security 253

Security 253

Data Breach Today

JANUARY 8, 2021

federal court system is investigating an "apparent compromise" of a confidential electronic filing system used for sensitive legal documents. Meanwhile, Courts Suspend Use of SolarWinds, Adopt New Document Security Measures The U.S.

Security 345

Security IT 345

Data Breach Today

JUNE 18, 2021

Bipartisan Legislation Would Require Notifying CISA Within 24 Hours of a Breach Discovery A bipartisan group of senators is circulating a draft of a federal breach notification bill that would require federal agencies, federal contractors and businesses that have oversight over critical infrastructure to report significant cyberthreats to CISA within (..)

257

257

Data Breach Today

JUNE 15, 2022

Mark Cristiano of Rockwell Automation on Why Uptime Is Crucial for Infrastructure Critical infrastructure providers face a unique set of challenges when it comes to securing their environment from the cruciality of uptime to complying with new federal directives, according to Mark Cristiano, commercial director for Rockwell Automation's global services (..)

Security 245

Security IT 245

Data Breach Today

OCTOBER 26, 2022

More People Affected by Breaches Than Total US Population The federal tally of health data breaches reached a new milestone this week: Since its inception in September 2009, more than 5,000 major incidents have been posted to the Department of Health and Human Services' HIPAA breach "wall of shame."

Data breaches 246

Data breaches IT 246

Data Breach Today

JUNE 23, 2022

Vulnerabilities Contained in Certain Hillrom Medical Electrocardiographs A popular line of portable electrocardiographs contains vulnerabilities that allow hackers to execute commands and access sensitive information, federal authorities warn. Device manufacturer Hillrom Medical has released a patch and coordinated disclosure with CISA.

Manufacturing 246

Manufacturing Security Access 246

Data Breach Today

JULY 27, 2021

Senate Judiciary Committee Hears Testimony from DOJ, FBI, CISA Congress needs to update and expand federal laws to combat the surge in ransomware attacks, federal cybersecurity experts told a Senate committee at a Tuesday hearing.

Ransomware 274

Ransomware Cybersecurity 274

AIIM

NOVEMBER 14, 2023

We identify, protect, preserve, and make publicly available the historically valuable records of all three branches of the federal government. Government leads records management throughout the federal government and assesses the effectiveness of federal records management policies and programs.

Records Management 149

Records Management Archiving Government Digital preservation 149

Data Breach Today

APRIL 14, 2023

The sheer volume of federal regulations in place makes it almost impossible for agencies to monitor and comply with all of them, much less understand the impact of new ones. Nick Graham of Skyhigh Security explores the many compliance challenges - and how to overcome them.

Compliance 144

Compliance Security IT 144

Data Breach Today

FEBRUARY 24, 2021

Operational Error Blamed for Nationwide System Crash The Federal Reserve's online money transfer system, including Fedwire Funds and Fedcash, suffered an outage for more than three hours Wednesday afternoon, citing technical issues for the event and not a cyber incident. Systems were restored by late afternoon.

285

285

Data Breach Today

SEPTEMBER 25, 2020

Cybersecurity and Infrastructure Security Agency has issued a report describing how a threat actor apparently used a well-known VPN vulnerability and compromised Office 365 credentials to gain administrative privileges to a federal agency's network.

Cybersecurity 330

Cybersecurity Security 330

Data Breach Today

FEBRUARY 28, 2024

Feds Issue Alert as Change Healthcare Hack Affects Medicare, CVS Caremark, MetLife BlackCat claimed on its dark web site that it is behind the biggest healthcare hack so far the year - exfiltrating 6 terabytes of "highly selective data" relating to "all" Change Healthcare clients, including Tricare, Medicare, CVS Caremark, MetLife and more.

IT 263

IT 263

Data Breach Today

JUNE 30, 2021

The Federal Cybersecurity Workforce Expansion Act would also create a cyber-training program within the Department of Veterans Affairs, equipping veterans to hold careers in cyber defense. Workforce Expansion Act Would Create CISA, VA Training Programs Sens.

Cybersecurity 261

Cybersecurity 261

Data Breach Today

NOVEMBER 3, 2021

Cybersecurity and Infrastructure Security Agency on Wednesday issued a new directive - BOD 22-01 - requiring federal civilian agencies to patch vulnerabilities known to be actively exploited in the wild. BOD 22-01 Imposes Strict Deadlines for Remediation of Publicly Known Exploits The U.S.

Cybersecurity 254

Cybersecurity Security 254

Data Breach Today

AUGUST 3, 2021

Congressional Report Highlights a Lack of Progress A congressional report examining eight federal agencies found that seven continue to improperly protect sensitive data and do not meet basic cybersecurity standards.

Cybersecurity 261

Cybersecurity 261

Data Breach Today

OCTOBER 29, 2021

Director Chris Inglis Also Outlines Vision for NCD Office, Level of Accountability National Cyber Director Chris Inglis on Thursday announced that Federal CISO Chris DeRusha will concurrently serve as his deputy at the newly created office.

254

254

Security Affairs

DECEMBER 12, 2023

The Ukrainian government’s military intelligence service announced the hack of the Russian Federal Taxation Service (FNS). Hackers of the Main Intelligence Directorate of the Ministry of Defense of Ukraine announced they have compromised the Russian Federal Taxation Service (FNS). At the same time, the Russian IT company Office.ed-it.ru,

Military 111

Military Government Communications IT 111

Data Breach Today

MAY 4, 2023

Prosecutors Asked for 15 Month Sentence; Sullivan Instead Gets 3 Years of Probation Joe Sullivan, the former chief security officer of Uber, will not spend time in prison for his role in impeding a federal investigation into the ride-hailing company's security practices. His sentence is three years of probation and a $50,000 fine.

Security 144

Security 144

Security Affairs

MARCH 8, 2024

The ransomware attack on Xplain impacted tens of thousands Federal government files, said the National Cyber Security Centre (NCSC) of Switzerland. Xplain provides its services to several federal and cantonal government departments, the army, customs, and the Federal Office of Police (Fedpol). ” reads the report.

Ransomware 124

Ransomware Data breaches Unstructured data Personal data 124

Krebs on Security

JUNE 10, 2022

At the outset of their federal criminal trial for hijacking vast swaths of Internet addresses for use in large-scale email spam campaigns, three current or former executives at online advertising firm Adconion Direct (now Amobee ) have pleaded guilty to lesser misdemeanor charges of fraud and misrepresentation via email.

Marketing 245

Marketing Government Systems administration Sales 245

Data Breach Today

AUGUST 1, 2020

DOJ: Valerian Chiochiu Provided Cybercriminals Help Through Infraud Site A member of the infamous Infraud Organization and the creator of a malware strain called FastPOS has pleaded guilty to federal conspiracy charges, according to the Justice Department.

IT 283

IT 283

Data Breach Today

DECEMBER 15, 2023

Agencies Lack Capabilities to Track, Investigate and Remediate Threats, Report Says The departments of Commerce, State and Justice are among the 20 agencies identified in a Government Accountability Office report as having failed to meet key cyberthreat incident response deadlines outlined in the 2021 cybersecurity executive order.

Cybersecurity 270

Cybersecurity Government 270

Data Breach Today

AUGUST 12, 2021

Clearer Lines of Demarcation Needed, House Members Say In a letter sent to National Cyber Director Chris Inglis this week, a bipartisan group of lawmakers says clearer lines of demarcation are needed to better define the responsibilities of federal officials involved in cybersecurity.

Cybersecurity 205

Cybersecurity 205

Data Breach Today

NOVEMBER 3, 2021

Analysis of Latest Health Data Breaches on the HHS OCR 'Wall of Shame' Ransomware incidents are becoming a major cause of health data breaches affecting millions of individuals that have been reported so far in 2021, according to the latest additions to the federal tally. What else is topping the list?

Ransomware 215

Ransomware Data breaches 215

Data Breach Today

APRIL 2, 2021

DOJ: Wyatt Travnichek Allegedly Accessed Cleaning and Disinfecting System A Kansas man faces federal charges for allegedly accessing the network of a local water treatment facility and tampering with the systems that control the cleaning and disinfecting procedures, according to the Justice Department.

Access 263

Access Security 263

Data Breach Today

SEPTEMBER 28, 2021

Analysis of Latest Major Health Data Breaches Posted to HHS OCR Website Hacking incidents - especially those involving ransomware attacks and vendors - continue to rack up some of the largest victim counts in major health data breaches being reported to federal regulators in 2021. Will the trend continue?

Ransomware 196

Ransomware Data breaches 196

Data Breach Today

NOVEMBER 20, 2023

Drenan Dudley Appointed to Serve as Acting National Cyber Director Drenan Dudley, who previously served as deputy national cyber director for strategy and budget at the Office of the National Cyber Director, will temporarily lead the agency while the White House nominee to serve in a permanent capacity awaits a vote in the Senate.

277

277

Data Breach Today

SEPTEMBER 30, 2020

IoT Products Would Have to Meet Minimum Security Requirements for Use by Government Legislation that establishes minimum security standards for IoT devices procured by the federal government is moving closer to becoming law.

IoT 252

IoT Government Security 252

Data Breach Today

NOVEMBER 3, 2023

Local Election Offices Face Critical Lack of Cyber Resources, Officials Warn Secretaries of state and election administrators told the Senate Committee on Rules and Administration that local election offices are facing a critical lack of resources and funding to support essential cybersecurity measures ahead of the upcoming voting cycle.

Cybersecurity 238

Cybersecurity 238