Security Affairs

NOVEMBER 18, 2018

Instagram has suffered a serious security leak that might have exposed user’s passwords, revealed The Information website. Instagram notified some of its users that it might have accidentally exposed their password due to a security glitch. ” states a blog post published on The Information.

Passwords 111

Passwords Personal data Privacy Data Privacy 111

DLA Piper Privacy Matters

OCTOBER 13, 2020

In contrast to personal injury claims where lawyers have (hundreds of) years of case law to call upon to help calculate compensation, there is comparatively little case law considering how compensation will be calculated for distress when personal data are processed in breach of GDPR. The decision. The District Court dismissed both claims.

GDPR 103

GDPR Data breaches Personal data Access 103

DLA Piper Privacy Matters

NOVEMBER 22, 2018

The State Commissioner for Data Protection and Freedom of Information Baden-Wuerttemberg (LfDI) was the first German data protection authority to impose a fine under the GDPR. 32 (1) (a) GDPR (obligation to pseudonymise and encrypt personal data). 83 (4) (a) GDPR). 83 (4) (a) GDPR).

GDPR 97

GDPR Data breaches Personal data Passwords 97

KnowBe4

DECEMBER 4, 2023

When you think of KnowBe4, you probably think of phishing training, good password hygiene modules, security awareness, or maybe even data protection compliance such as GDPR.

Security awareness 113

Security awareness GDPR Compliance Phishing 113

DLA Piper Privacy Matters

AUGUST 12, 2020

On 28 July 2020, the French Supervisory Authority (the “CNIL”) sanctioned the online shoes retail company, SPARTOO SAS, by a €250,000 fine and an injunction to comply with GDPR within 3 months under penalty for various non-compliances with the GDPR of the personal data processing related to clients, prospects and employees [1].

GDPR 93

GDPR Personal data Compliance Passwords 93

Security Affairs

JULY 21, 2019

The airline company WizzAir informed its customers that it had reset the account passwords due to a technical issue in the system. The airline company WizzAir had reset the account passwords of its users due to a technical issue in its system. Fortunately, it seems that the company was not hacked. Pierluigi Paganini.

Passwords 85

Passwords IT Personal data GDPR 85

KnowBe4

SEPTEMBER 10, 2019

The California Consumer Privacy Act (CCPA) was introduced just a month after the European Union instituted the General Data Protection Regulation (GDPR), earning the CCPA the nickname of “California’s GDPR.”. While the GDPR has been in effect since May of 2018, the CCPA is on track to become effective on January 1, 2020.

GDPR 74

GDPR Privacy Personal data Passwords 74

Security Affairs

JANUARY 28, 2019

After the discovery of hacking attempts, the French firm logged users out and forced a password reset procedure by including in the notification a link to change the password and re-gain access to the account. The post Dailymotion forces password reset in response to credential stuffing Attack appeared first on Security Affairs.

Passwords 80

Passwords Data breaches Archiving Sales 80

IT Governance

JUNE 29, 2018

This week, we discuss the apparent leak of 340 million data records, a vulnerability that exposed sensitive BetVictor data, a data breach affecting up to 40,000 Ticketmaster customers, and the number of GDPR complaints since 25 May. usernames, passwords, URLs?—?is Users have also been advised to reset their passwords.

GDPR 76

GDPR Passwords Data breaches Access 76

IT Governance

MARCH 26, 2020

One area you might not have considered is how to maintain compliance with the GDPR (General Data Protection Regulation) and UK DPA (Data Protection Act) 2018. The GDPR calls for appropriate technical and organisational measures to safeguard personal data. Meeting your other GDPR obligations. Risk-based approach.

GDPR 93

GDPR Compliance Phishing Risk 93

IT Governance

FEBRUARY 28, 2019

This week, we discuss ICANN’s warning about DNS attacks, the extent of credential stuffing attacks on the retail sector, password managers’ responses to recent research into security flaws, and the European Data Protection Supervisor’s annual report for 2018. We often talk about the perils of password reuse.

Passwords 73

Passwords GDPR Retail Government 73

IT Governance

JUNE 8, 2018

This week, we discuss the compromise of 92 million MyHeritage users’ credentials, “unauthorised activity” at PageUp, a missing memory stick at Rochester Grammar School, and the first couple of weeks of the GDPR. Users will have to change their passwords and have been urged to implement two-factor authentication once it is available.

GDPR 66

GDPR Passwords Authentication Information Security 66

Troy Hunt

AUGUST 26, 2021

Lots of little things this week, hoping next week will be the big "hey, Pwned Passwords just passed 1 billion", stay tuned for that one 😊 References You probably should have an OnlyFans account (no, not in the way it sounds like you should.) Is the silver lining of Brexit an end to inane cookie warnings?

Passwords 115

Passwords GDPR Security IT 115

Security Affairs

MARCH 16, 2024

In accordance with its obligations under the General Data Protection Regulation (GDPR), Pôle emploi has notified the CNIL today. Email addresses, phone numbers, passwords and financial data are not exposed. The press release published by the agency states that its information systems are not impacted. “In

Data breaches 128

Data breaches Personal data Ransomware GDPR 128

Security Affairs

OCTOBER 9, 2022

Crooks left a ransom note, threatening to leak the data and inform authorities of the EU’s General Data Protection Regulation (GDPR) violations. BTC (about $200) ransom, threatening to start leaking data and warning about huge fines related to the potential GDPR violations. Original Post published on CyberNews. Dangerous leak.

Ransomware 105

Ransomware Passwords GDPR Encryption 105

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”). The CNIL found that the company should have required users to use more robust passwords.

Retail 114

Retail GDPR IT Personal data 114

IT Governance

MAY 9, 2019

HMRC (HM Revenue and Customs) has been told to delete more than five million people’s voice records after it was discovered that the way the information was collected breached the GDPR (General Data Protection Regulation). The organisation changed the way it obtained consent in October 2018, which the ICO says now complies with the GDPR.

GDPR 53

GDPR Personal data Education Passwords 53

HL Chronicle of Data Protection

NOVEMBER 23, 2018

In the first fine issued by a German data protection authority under the European General Data Protection Regulation (“GDPR”), on 21 November 2018 the authority of the German state of Baden-Württemberg (“LfDI”) imposed a fine of Euro 20,000 on a social media provider for a violation of its data security obligations under Art. 32 of the GDPR.

GDPR 40

GDPR Data breaches Passwords Personal data 40

Hunton Privacy

MARCH 30, 2023

The French DPA determined that in doing so, Cityscoot breached the obligation of data minimization under Article 5 of the EU General Data Protection Regulation (“GDPR”), as this type of processing is highly intrusive and the service could be provided without collecting its users’ geolocation on an almost permanent basis.

GDPR 67

GDPR Passwords IT Security 67

HL Chronicle of Data Protection

FEBRUARY 22, 2019

Many companies have been struggling with GDPR implementation over the past two years, putting much effort into new roles, privacy concepts, and workflows. The magnitude of new legal and business process requirements under the GDPR caused a tremendous change in the legal data privacy landscape for many companies doing business in Europe.

GDPR 40

GDPR Compliance Personal data Privacy 40

Troy Hunt

JULY 17, 2018

I love so many of the underlying principles of GDPR as it relates to protecting our personal data. However, there are many things I dislike about the narrative around GDPR. Happy #GDPR Day, indeed. After the ViewFines data breach, I had a number of people flagging the South African company's GDPR obligations.

GDPR 49

GDPR Privacy Communications Data breaches 49

Security Affairs

AUGUST 26, 2023

“In accordance with its obligations under the General Data Protection Regulation (GDPR), Pôle emploi has notified the CNIL today. Email addresses, phone numbers, passwords and financial data are not exposed. The press release published by the agency states that its information systems are not impacted.

Data breaches 98

Data breaches GDPR Personal data Government 98

Hunton Privacy

OCTOBER 29, 2018

Recently, the French Data Protection Authority (the “CNIL”) published a statistical review of personal data breaches during the first four months of the EU General Data Protection Regulation’s (“GDPR”) entry into application. View the review (in French). . Types of breaches. Assessing the necessity to notify affected data subjects.

Data breaches 96

Data breaches GDPR Personal data Risk 96

Security Affairs

OCTOBER 2, 2023

” ù In response to the incident, ETSI prompted its users to change their passwords. The organization also reported the incident to the French data protection authority (CNIL) as required by the General Data Protection Regulation (GDPR). Transparency is at the root of ETSI, in our governance and technical work.

Data breaches 126

Data breaches Communications Cybersecurity GDPR 126

IT Governance

JANUARY 25, 2019

The database should have only been accessible to certain employees, but security specialists at CtrlBox found the database an ElasticSearch server, left publicly available and without password protection. Calder also outlined some of the ways in which the existence of the list itself is a potential GDPR violation.

Data breaches 111

Data breaches GDPR Passwords Retail 111

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. law, consumers and the marketplace have been comfortable with to date.

GDPR 79

GDPR Privacy Sales Data breaches 79

IT Governance

JUNE 1, 2018

According to a Department of Justice announcement this week, Baratov hacked into at least 80 webmail accounts of individuals who were of interest to Dokuchaev, and send him the accounts’ passwords in exchange for money. It will be reporting the incident, as mandated by the GDPR. Acting U.S. Attorney Alex G.

GDPR 67

GDPR Compliance Computer and Electronics Data breaches 67

Hunton Privacy

OCTOBER 25, 2022

million fine to Interserve Group Limited for failing to keep employee personal data secure, which violates Article 5(1)(f) and Article 32 of the EU General Data Protection Regulation (“GDPR”), during the period of March 2019 to December 2020. On October 24, 2022, the UK Information Commissioner’s Office (“ICO”) issued a £4.4

Security 97

Security Personal data GDPR Insurance 97

IT Governance

NOVEMBER 19, 2018

The hotel group has confirmed that no payment card information, passwords or travel history were accessed. As the group is headquartered in Belgium and many of its members are EU residents, it comes under the jurisdiction of the EU GDPR (General Data Protection Regulation). However, the following data was compromised: Member names.

GDPR 93

GDPR Phishing Passwords Data breaches 93

IT Governance

JANUARY 25, 2023

We also recommend securing your data by creating unique passwords and storing them in a password manager. This reduces the risk of a cyber criminal guessing your credentials but means you don’t have the burden of having to remember a series of complex passwords.

Personal data 114

Personal data Passwords Data Privacy Privacy 114

Thales Cloud Protection & Licensing

JUNE 24, 2021

In the following paragraphs we will examine use cases where FIDO2 simplifies compliance with privacy and security regulations, namely GDPR, CCPA and PSD2. Compliance with GDPR and CCPA. The use of asymmetric cryptography helps to mitigate all known attacks that target “shared” credentials like passwords. Data security.

Authentication 71

Authentication Compliance GDPR Personal data 71

IT Governance

NOVEMBER 26, 2019

Other sensitive information such as passwords and financial information weren’t affected. Because the breach occurred in the US rather than the EU, it isn’t subject to the GDPR (General Data Protection Regulation) , which would have required T-Mobile to inform customers within 72 hours of learning about it. What happened?

Data breaches 144

Data breaches Passwords Encryption Access 144

IT Governance

NOVEMBER 16, 2018

Once Eurostar realised it had suffered a data breach, it: Identified the timing and the scale of the breach; Blocked access; Emailed customers alerting them to the situation and advising them to reset passwords; and. What did Eurostar do differently?

Data breaches 106

Data breaches Passwords GDPR Access 106

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. law, consumers and the marketplace have been comfortable with to date.

GDPR 60

GDPR Privacy Sales Data breaches 60

eSecurity Planet

AUGUST 4, 2022

By encrypting data, it can only be accessed with the right password and by those with the appropriate access rights. You may have seen passwords getting longer and more complex in recent times. This stems from how easily cybercriminals can figure out passwords and decrypt data or gain access to systems using a brute-force approach.

Encryption 132

Encryption Computer and Electronics Cloud Passwords 132

IT Governance

SEPTEMBER 7, 2023

This week, we discuss security issues at the Electoral Commission, Meta’s appeal against daily GDPR fines, and a breach affecting 10 million users of the French unemployment agency Pôle emploi. Email addresses, phone numbers, passwords and bank details were unaffected. The fines are due to continue until 3 November.

Government 115

Government IT Personal data GDPR 115

IT Governance

FEBRUARY 14, 2023

It’s also referenced in the GDPR (General Data Protection Regulation) , with Article 32 stating that organisations must “implement appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of processing systems and services”.

IT 105

IT Risk GDPR Information Security 105