IT Governance

OCTOBER 13, 2023

EvilProxy phishing campaign targets Microsoft 365 accounts via indeed.com A phishing campaign identified by Menlo Security has been targeting senior executives in various industries – most notably banking and financial services, property management and real estate, and manufacturing – since July. Can you spot a phishing scam?

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

Hunton Privacy

JULY 1, 2022

On June 24, 2022, the New York State Department of Financial Services (“NYDFS” or the “Department”) announced it had entered into a $5 million settlement with Carnival Corp. Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Hunton Privacy

MARCH 11, 2021

On March 3, 2020, the New York Department of Financial Services (“NYDFS”) announced it had entered into a settlement with Residential Mortgage Services, Inc. (“RMS”) RMS”) related to allegations that RMS violated the NYDFS Cybersecurity Regulation in connection with a 2019 data breach. Read the full NYDFS settlement.

Data breaches 97

Data breaches Cybersecurity Financial Services Personal data 97

Security Affairs

MARCH 29, 2022

Earmarked by the FBI as a particular threat to the financial service industry just over a year ago, the increase of internet traffic, data breaches and API usage all contribute to the perfect conditions for successful credential stuffing attacks. Why is it so prevalent now? How credential stuffing attacks work. Launch attack.

IT 77

IT Passwords Authentication Data Privacy 77

Thales Cloud Protection & Licensing

JANUARY 10, 2024

That decision of adequacy provides in substance that there is an adequate level of protection—comparable to that in the EU—for personal data transferred from the EU to US companies that are participating in the DPF. However, European organizations need to dive with eyes wide open when transferring personal data to the US under the DPF.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Collibra

FEBRUARY 11, 2020

Seizing an opportunity to improve data relationships with third parties. Regulators are focusing on the data relationships financial services organizations have with third parties, including how well personal information is being managed. Exploring third party data relationship risk.

Financial Services 59

Financial Services Digital transformation Personal data Compliance 59

Security Affairs

APRIL 20, 2023

However, despite the critical status of bank infrastructure on the national level, the security of crucial data was not ensured. During the recent investigation, the Cybernews research team discovered that the bank leaked the sensitive data due to the misconfiguration of their systems. million files belonging to ICICI Bank.

Personal data 97

Personal data Phishing Risk Financial Services 97

IT Governance

NOVEMBER 13, 2023

On 14 September, Mulkay discovered that the compromised files contained personal information, including “name, address, date of birth, Social Security number, driver’s license number or state ID, medical treatment information, and health insurance information”. Customer data, which was encrypted, was reported to be unaffected.

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

Data Matters

JANUARY 28, 2022

Other government agencies, like the New York Department of Financial Services and the Federal Trade Commission, are also increasingly focused on the need for broad implementation of MFA. Best Practices to Minimize Disruptions. Like an incident response plan, MFA has become a critical element of cybersecurity programs.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

DLA Piper Privacy Matters

FEBRUARY 28, 2022

The Data Protection Commission (DPC) has published its 2021 Annual Report , highlighting key observations, emerging guidance, and large-scale inquiries and decisions of 2021. The DPC received a total of 6,549 valid notifications of personal data breaches in 2021.

Financial Services 97

Financial Services Data breaches Personal data Compliance 97

Hunton Privacy

OCTOBER 17, 2012

On October 15, 2012, the Singapore Parliament passed the Personal Data Protection Act 2012. The new law will apply only to data processing in the private sector as data processing by public agencies (or organizations acting on behalf of public agencies) are already subject to internal government rules.

Personal data 45

Personal data Financial Services Data Privacy Data breaches 45

HL Chronicle of Data Protection

OCTOBER 25, 2019

continues to provide an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S. continues to provide an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S.

Privacy 40

Privacy IT Personal data Financial Services 40

Security Affairs

NOVEMBER 9, 2023

Sberbank , the Russian banking and financial services giant, announced that it was recently hit by a record-breaking distributed denial of service (DDoS) attack that reached 1 million RPS. Then it did not affect the availability of bank services. “If we talk about DDoS, the last attack was probably two weeks ago.

Personal data 84

Personal data Financial Services Marketing Cloud 84

Hunton Privacy

DECEMBER 19, 2022

Further, the UK and the DIFC have strong links in the financial sector, following the DIFC’s establishment in 2004, with 16% of the DIFC’s financial services companies originally based in the UK.

Government 61

Government Financial Services Personal data Security 61

ARMA International

APRIL 18, 2022

It is essential that your organization’s records retention schedule is compliant with the data protection requirements in the jurisdictions where your organization operates. Introduction to Data Protection Laws. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Security Affairs

DECEMBER 17, 2023

Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center New NKAbuse malware abuses NKN decentralized P2P network protocol Snatch ransomware gang claims the hack of the food giant Kraft Heinz Multiple flaws in pfSense firewall can lead to arbitrary code execution BianLian, White Rabbit, and Mario Ransomware Gangs Spotted (..)

Security 82

Security Data breaches Ransomware Artificial Intelligence 82

Data Protection Report

OCTOBER 24, 2022

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. We had previously written about the increasing regulatory fines for over-retention of data. 23 NYCRR § 500.13.

Cybersecurity 52

Cybersecurity Personal data Risk Financial Services 52

Data Protector

JANUARY 29, 2017

Each professional consulting firm I’ve come across carries out data protection audits / health checks in different ways. The GDPR is (apparently) going to require data controllers to be more transparent about their records retention policies. That's the question I’m being increasingly asked these days. I think not. Does this matter?

GDPR 136

GDPR Privacy Compliance Personal data 136

Data Protection Report

DECEMBER 23, 2019

The most significant action came in October, when the Berlin Commissioner for Data Protection and Freedom of Information issued a €14.5million fine against German real estate company, Deutsche Wohnen SE, relating to the excessive retention of personal data. In the U.S.,

Privacy 144

Privacy Compliance Personal data Risk 144

Data Matters

SEPTEMBER 24, 2019

Many of the new or modernized laws tend to be based on comprehensive legislation, rather than sectoral rules, as data needs to move across industry groups and borders. This comprehensive data privacy law wave has already reached parts of Latin America and the Caribbean. An Overview of the BDPA.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

Data Protection Report

FEBRUARY 8, 2022

EyeMed engaged a forensic investigator, which was unable to determine whether any exfiltration of personal data had occurred, due in part to a lack of log data. 3) Organizations should review how long they retain data security logs and make sure they will have enough information to investigate a cyber incident.

Passwords 98

Passwords Financial Services Authentication Insurance 98

DLA Piper Privacy Matters

JANUARY 29, 2019

Earlier today, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens ) issued a press release stating that it received 20,881 notifications of data breaches in 2018. In comparison to 2017, the amount of data breach notifications has (more than) doubled.

Data breaches 40

Data breaches Personal data Financial Services Phishing 40

Hunton Privacy

OCTOBER 24, 2022

On October 18, 2022, the New York State Department of Financial Services (“NYDFS”) announced that EyeMed Vision Care LLC (“EyeMed”) agreed to a $4.5 The NYDFS’s consent order notes that EyeMed’s failure to comply with the Cybersecurity Regulation left EyeMed vulnerable to threat actors.

Cybersecurity 67

Cybersecurity Financial Services Risk Phishing 67

IT Governance

NOVEMBER 9, 2018

There are three exceptions to this restriction: If it is necessary to perform a contract between the data subject and a data controller. If it is authorised by EU or member state law to which the data controller is subject. If the data subject gives their explicit consent. What is profiling under the GDPR?

GDPR 88

GDPR Personal data Financial Services Compliance 88

DLA Piper Privacy Matters

MARCH 30, 2023

Two-thirds of the GDPR fines issued by EU data protection authorities last year where from the DPC, illustrating a continued commitment to enforcement. This inquiry involves the processing of personal data in relation to biometric facial templates used in the department’s registration process.

Personal data 52

Personal data GDPR Compliance Financial Services 52

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. PIPL Raises the Bar – And the Stakes.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Security Affairs

JUNE 18, 2020

financial institutions and two banks in Canada and the Netherlands. financial institutions and two banks in Canada and the Netherlands;” reads the report published by F5 Labs. link] [link] [link] associated with financial services to capture credentials. The campaign targets 36 different U.S.

Phishing 101

Phishing Financial Services Personal data Security 101

DLA Piper Privacy Matters

APRIL 20, 2021

This introduces a data lifecycle security framework, and represents the key guideline for handling personal and other financial information by financial institutions (i.e. similar to the PIS Specification, but focused on the banking and financial services industry). Level 1: public data.

Compliance 111

Compliance Security Financial Services Data collection 111

Hunton Privacy

MARCH 13, 2019

In the context of data protection, this means using live personal data of real individuals in the testing phase under the supervision of a data protection authority. The White Paper sets out the key features of the regulatory sandbox and outlines a series of relevant developments regarding the concept in data protection.

Paper 75

Paper Financial Services Personal data IT 75

Collibra

AUGUST 14, 2023

To a large degree, AI governance is an extension of our data governance efforts tested many times over with organizations around the world. It should clearly define the problem that the AI model solves, the data used to train the model, the desired outcomes, and the personas involved. AI is everywhere these days.

Government 52

Government Risk Financial Services Compliance 52

Data Protection Report

SEPTEMBER 28, 2021

On 10 September 2021, the UK Government published its consultation paper on proposals to reform the UK’s data protection regime. The deadline for responding to the consultation is 19 November 2021. It has seized it with gusto, announcing more than 70 proposals and calls for views and publishing its economic analysis of expected impact.

Government 120

Government FOIA GDPR Compliance 120

Security Affairs

JANUARY 27, 2022

Personal data belonging to millions of customers of large businesses have been exposed due to a flaw in Onfido IDV. Millions of customers of large businesses have been left vulnerable to identity theft, thanks to a security flaw that exposes their personal data to illicit download. Verification process.

Personal data 89

Personal data Phishing Data breaches Passwords 89

CGI

OCTOBER 25, 2015

Thomson Reuters was recently quoted as saying, “Increased regulation isn’t just a temporary challenge for global financial institutions—it’s the new reality.”. The answer is easy—all key players in the finance sector, including consumers, financial services providers and systems integrators. Mon, 10/26/2015 - 01:33.

IT 40

IT Security Digital transformation Compliance 40

Hunton Privacy

OCTOBER 17, 2018

The regulatory sandbox concept is intended to provide a supervised safe space for piloting and testing innovative products, services, business models or delivery mechanisms in the real market, using the personal data of real individuals.

Financial Services 59

Financial Services Paper Personal data Compliance 59

Data Matters

JUNE 24, 2021

The Order alleges that this vulnerability exposed over 800 million images dating back to 2003, including sensitive personal data, such as Social Security numbers and financial information. SEC Statement and Guidance on Public Company Cybersecurity Disclosures. enable companies to identify cybersecurity risks and incidents.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

HL Chronicle of Data Protection

JUNE 14, 2019

As the first broad-based state law on consumers’ personal data in the U.S., Please join the Hogan Lovells Privacy and Cybersecurity team and LexisNexis on June 19 for the webinar, Operationalizing the California Consumer Privacy Act – Key Decisions and Compliance Strategies.

Privacy 40

Privacy GDPR Compliance Financial Services 40

DLA Piper Privacy Matters

OCTOBER 16, 2019

Multinationals increasingly turning to BCRs as providing more legal certainty for personal data transfers from the EU. The EU General Data Protection Regulation (“GDPR”) brought about stricter data protection rules, and increased penalties for breaching these rules. What are BCRs?

GDPR 40

GDPR Personal data Marketing Healthcare 40