Data Breach Today

JUNE 21, 2021

SEC: Executives Left in Dark About Vulnerability in File-Sharing System Title insurance company First American Financial Corp. Information security staff members were aware of the vulnerability in the company's EaglePro document-sharing system for five months but failed to fix it, the SEC reports.

Insurance 342

Insurance Data breaches Information Security Security 342

IT Governance

OCTOBER 15, 2020

Cyber threats are so numerous that it’s impossible to prevent security incidents altogether. That’s why they organisations increasingly relying on cyber insurance policies to cover the costs when data breaches and cyber attacks occur. But just how helpful is cyber insurance? What is cyber insurance?

Insurance 119

Insurance Data breaches Risk Security 119

Data Matters

FEBRUARY 2, 2021

The National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law has been adopted in at least 11 states, with several others (including New York) having implemented either older or similar laws or administrative guidance. See State Legislative Brief, NAIC, June 2020. See MCL § 500.555(9).).

Insurance 113

Insurance Security Compliance Privacy 113

Security Affairs

APRIL 20, 2021

Car insurance provider Geico has suffered a data breach, attackers have stolen the driver’s licenses for policyholders for several weeks. Geico, the second-largest auto insurer in the U.S., We have reason to believe that this information could be used to fraudulently apply for unemployment benefits in your name.”

Insurance 134

Insurance Data breaches Sales Security 134

Security Affairs

APRIL 22, 2022

When security fails, cyber insurance can become crucial for ensuring continuity. Our reliance on digital technology and the inherited risk is a key driving factor for buying cyber risk insurance. If the technology were to become unavailable, the resulting business impact could be mitigated with cyber insurance.

Insurance 93

Insurance Risk Cybersecurity Ransomware 93

Security Affairs

FEBRUARY 21, 2023

Recently emerged HardBit ransomware gang adjusts their demands so the insurance company would cover the ransom cost. For those who have cyber insurance against ransomware attacks. That way you would have avoided a leak and decrypted your information. Very important! reads the ransom note.

Insurance 92

Insurance Ransomware Encryption IT 92

Security Affairs

JULY 9, 2021

Insurance giant CNA notifies customers of a data breach after the Phoenix CryptoLocker ransomware attack suffered in March. US insurance giant CNA is notifying customers of a data breach after the ransomware attack that it suffered in March. Bloomberg was informed about the payment by two people familiar with the attack.

Data breaches 144

Data breaches Insurance Ransomware Encryption 144

Security Affairs

SEPTEMBER 29, 2020

Gallagher (AJG) insurance giant disclosed a ransomware attack, the security breach took place on Saturday. Gallagher (AJG) global insurance brokerage firm confirmed that it was his with a ransomware attack on Saturday, September 26. US-based Arthur J. US-based Arthur J. “On September 26, 2020, Arthur J. The post Arthur J.

Insurance 143

Insurance Ransomware Data breaches Cybersecurity 143

Security Affairs

MAY 1, 2023

Bitmarck, one of the largest IT service providers for social insurance carriers in Germany, announced yesterday that it has suffered a cyber attack. The incident impacted statutory health insurance companies that have their IT operated by BITMARCK. The company immediately reported the incident to the responsible authorities.

IT 92

IT Insurance Data breaches Education 92

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 77

Insurance Financial Services Cybersecurity Risk 77

Security Affairs

MAY 19, 2024

According to the notice published by the company, WebTPA acts as an administrative services provider to certain benefit plans and insurance companies whose information was impacted in this incident. The investigation revealed that an unauthorized actor may have obtained personal information between April 18 and April 23, 2023. .

Data breaches 122

Data breaches Insurance Cybersecurity Security 122

Krebs on Security

JUNE 18, 2021

Securities and Exchange Commission settled its investigation into the matter after the Fortune 500 company agreed to pay a paltry penalty of less than $500,000. The SEC says First American derives nearly 92 percent of its revenue from its title insurance segment, earning $7.1 This week, the U.S. First American Financial Corp.

Insurance 282

Insurance Risk Financial Services Mining 282

eSecurity Planet

SEPTEMBER 21, 2024

Each of these regulations addresses different aspects of cybersecurity and data protection, making it essential for businesses and organizations to stay informed and proactive. This includes developing and maintaining security plans, conducting regular risk assessments, and ensuring continuous monitoring of information systems.

Cybersecurity 120

Cybersecurity Computer and Electronics Compliance Privacy 120

Security Affairs

AUGUST 10, 2024

The organizations did not disclose details about the attack, however Bleeping Computer noticed that employees at McLaren Bay Region Hospital in Bay City have shared a ransom note warning that the hospital was hit by INC RANSOM ransomware group. The security breach exposed the sensitive personal information of 2,192,515 people.

Ransomware 120

Ransomware Insurance Data breaches Access 120

Security Affairs

SEPTEMBER 27, 2024

In a press statement, the Ministry said that systems have been restored to their backups including systems at Kuwait Cancer Control Center and administrative systems, like the health insurance and expatriate check-up systems.” According to the ministry, the healthcare systems were taken offline to secure them.

Insurance 109

Insurance Ransomware Government Security 109

IT Governance

DECEMBER 14, 2021

This approach, also known as managed cyber security, works by outsourcing cyber security to a third party. Organisations such as IT Governance that offer cyber security as a service assign dedicated experts to oversee the organisation’s data protection and data privacy needs. You’ll receive cyber insurance cover ?.

Security 129

Security Insurance Data breaches Information Security 129

The Security Ledger

AUGUST 20, 2019

We talk to Bruce McDonnell of the East West Institute about how insurers are responding. Related Stories Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware Podcast Episode 117: Insurance Industry Confronts Silent Cyber Risk, Converged Threats NotPetya Horror Story Highlights Need for Holistic Security.

Insurance 40

Insurance Risk Healthcare Manufacturing 40

Krebs on Security

APRIL 27, 2023

This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. government in February about his findings, but received no response. Huntington Bank has disabled the leaky TCF Bank Salesforce website.

Access 295

Access Information Security Authentication Communications 295

Hunton Privacy

OCTOBER 14, 2014

The Department of Homeland Security concluded that these mergers introduced latent weaknesses into the company’s network, allowing hackers to go largely undetected for a significant period of time. The incident raises some issues for cyber insurance.

Insurance 40

Insurance Cybersecurity Manufacturing Information Security 40

Security Affairs

FEBRUARY 6, 2021

American corrugated packaging company WestRock announced at the end of January that it was the victim of a ransomware attack that impacted its information technology (IT) and operational technology (OT) systems. WestRock did not share details about the security incident, it only confirmed that its staff discovered the attack on January 23.

Ransomware 144

Ransomware Insurance Communications Security 144

Daymark

DECEMBER 5, 2023

On October 30, 2023, the US Securities and Exchange Commission (SEC) announced fraud charges against SolarWinds and its former chief information security officer (CISO), alleging that “ SolarWinds’ public statements about its cybersecurity practices and risks were at odds with its internal assessments.”

Insurance 62

Insurance Cybersecurity Risk Information Security 62

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Krebs on Security

JULY 21, 2023

A review of the executives pages published by the 2022 list of Fortune 100 companies found only four — BestBuy , Cigna , Coca-Cola , and Walmart — that listed a Chief Security Officer (CSO) or Chief Information Security Officer (CISO) in their highest corporate ranks.

Security 206

Security Risk Insurance Cybersecurity 206

Security Affairs

OCTOBER 23, 2024

It becomes increasingly difficult to gain complete visibility or transparency that could help security and privacy teams discover sensitive data, identify its security and compliance postures, and mitigate risks. To add to the difficulty, the advent of Generative AI (GenAI) has brought unprecedented security and privacy risks.

Data Privacy 108

Data Privacy Privacy GDPR Compliance 108

Security Affairs

DECEMBER 28, 2022

The chief executive of insurance giant Zurich warns that cyber attacks, rather than natural catastrophes, will become uninsurable. Mario Greco, chief executive of insurer giant Zurich, has warned that cyber attacks will become soon “uninsurable.”. What will become uninsurable is going to be cyber,” Mario Greco told the Financial Times.

Insurance 97

Insurance Risk Ransomware IT 97

The Last Watchdog

MARCH 13, 2023

So how will this affect chief information security officers (CISOs) and security programs? Given the perennial skills and staffing shortage in security, it’s unlikely that CISOs will be asked to make deep budget or staffing cuts, yet they may not come out of this period unscathed.

Security 203

Security Insurance Cybersecurity Customer Experience 203

IT Governance

OCTOBER 11, 2022

One of the most common mistakes that organisations make when addressing cyber security is that they consider it a one-off event. The framework consists of five interrelated stages (or ‘layers’) to help organisations manage information security risks across all parts of their business. Why Cyber Insurance is Essential in 2022.

Risk 123

Risk GDPR Information Security Personal data 123

Security Affairs

APRIL 29, 2024

Hutcheson allegedly provided irrelevant documents, such as health insurance and auto insurance policies, along with pages from sheriff training manuals, as evidence of authorization to access the data. All four carriers condemned the FCC’s decision and announced they would appeal it.

Insurance 110

Insurance Communications Access IT 110

Security Affairs

NOVEMBER 10, 2023

The security breach exposed the sensitive personal information of 2,192,515 people. The company became aware of anomalous activity on or about August 22, 2023, and immediately launched an investigation with the help of third-party forensic experts. It is a $6.6 The company also notified U.S. ” continues the notice.

Data breaches 122

Data breaches Ransomware Insurance Manufacturing 122

Security Affairs

MAY 29, 2023

MCNA Dental is one of the largest US dental care and oral health insurance providers. The security breach exposed the personal information of current or former provider of dental/orthodontic care to members of certain state Medicaid and Children’s Health Insurance Programs, for which MCNA provides dental benefits and services.

Ransomware 95

Ransomware Insurance Data breaches Government 95

Security Affairs

JULY 21, 2021

Experts found a DB containing sensitive health insurance data belonging to customers of US insurance giant Humana. An SQL database containing what appears to be highly sensitive health insurance data of more than 6,000 patients has been leaked on a popular hacker forum. Drug prescription listings). Who had access to the data?

Insurance 115

Insurance Passwords Libraries Access 115

The Last Watchdog

OCTOBER 29, 2018

The headlines immediately attempted to lay the blame, in large part, on the fact that Equifax’s chief information security officer was a music major and did not have a background in technology. The FTC considers that ‘reasonable security’ doesn’t mean ‘perfect security.’ Equifax was not special in this regard.

Security 164

Security Data Privacy Privacy Data breaches 164

Security Affairs

JULY 4, 2024

Healthcare firm HealthEquity disclosed a data breach caused by a partner’s compromised account that exposed protected health information. The intruders have stolen protected health information from the company systems. Some key facts about HealthEquity: As of July 2022, HealthEquity managed 7.5 million accounts.

Data breaches 97

Data breaches Insurance Access Cybersecurity 97

Security Affairs

JUNE 2, 2023

In April, the non-profit health insurer Point32Health took systems offline in response to a ransomware attack that took place on April 17. The insurer immediately launched an investigation into the incident with the help of third-party cybersecurity experts to determine the extent of the incident. between June 2020 and present.

Ransomware 96

Ransomware Insurance Data breaches Cybersecurity 96

Security Affairs

APRIL 4, 2024

US cancer center City of Hope suffered a data breach that impacted 800,000 individuals, personal and health information was compromised. City of Hope suffered a data breach, the organization started notifying 827149 individuals that their personal and health information was compromised. medical record number).”

Data breaches 112

Data breaches Insurance Security Government 112

Security Affairs

MAY 14, 2024

The health system employs about 3,800 people.” Potentially compromised information includes name, date of birth, address, Social Security number, medical information, and health insurance information. reported BankInfoSecurity.

Ransomware 109

Ransomware Data breaches Insurance Paper 109

Hunton Privacy

SEPTEMBER 11, 2014

Hunton & Williams Insurance Litigation & Counseling partner Lon Berk reports: An Israeli security firm recently uncovered a hacking operation that had been active for more than a decade. These policies typically are written on a claims-made basis; that is, a policy responds to a claim made during its policy period.

Insurance 40

Insurance Data breaches Cybersecurity Government 40