IT Governance

NOVEMBER 13, 2023

On 14 September, Mulkay discovered that the compromised files contained personal information, including “name, address, date of birth, Social Security number, driver’s license number or state ID, medical treatment information, and health insurance information”. Records breached: 79,582 Ontario hospitals update: information relating to 5.6

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

The Last Watchdog

JULY 13, 2023

London, July 13, 2023 — Beazley, the leading specialist insurer, today published its latest Risk & Resilience report: Spotlight on: Cyber & Technology Risks 2023. These threats are fast evolving and unfamiliar, with many companies being caught on the back-foot when dealing with the risk.

Risk 189

Risk Insurance Energy and Utilities Marketing 189

Thales Cloud Protection & Licensing

MAY 26, 2023

CIAM in insurance: A unified, secure user experience with a single login madhav Fri, 05/26/2023 - 07:33 In recent years, the insurance industry has transformed from a singularly focused entity to a multi-brand or multi-service type of business. Adding value to the user experience (a top priority for 59% of insurers) 2.

Insurance 71

Insurance Digital transformation Security Authentication 71

The Last Watchdog

AUGUST 1, 2023

1, 2023 – Guardz , the cybersecurity company securing and insuring SMEs, today disclosed the existence of a Hidden Virtual Network Computing (hVNC) malware targeting macOS devices. About Guardz: Guardz is a holistic cyber security and insurance solution designed for SMEs. Tel Aviv, Israel, Aug.

Insurance 189

Insurance Cybersecurity Risk Education 189

Krebs on Security

FEBRUARY 20, 2024

The government says Russian national Artur Sungatov used LockBit ransomware against victims in manufacturing, logistics, insurance and other companies throughout the United States. In May 2023, U.S. The person who will find out my name, tell it to me and explain how they were able to find it out will get USD 10 million.

Ransomware 283

Ransomware Encryption Insurance Manufacturing 283

Security Affairs

MAY 14, 2024

The Singing River Health System revealed that the ransomware attack that hit the organization in August 2023 impacted 895,204 people. At the end of August 2023, the systems at three hospitals and other medical facilities operated by Singing River Health System (SRHS) were hit by a Rhysida ransomware attack.

Ransomware 88

Ransomware Data breaches Insurance Paper 88

IT Governance

MARCH 11, 2024

Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc. billion in cyber crime losses in 2023 – a 22% increase on 2022’s figures.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

KnowBe4

MAY 16, 2023

CyberheistNews Vol 13 #20 | May 16th, 2023 [Foot in the Door] The Q1 2023's Top-Clicked Phishing Scams | INFOGRAPHIC KnowBe4's latest reports on top-clicked phishing email subjects have been released for Q1 2023. I've also talked quite a bit about cyber insurance and the recent trends. billion by 2027. "3x

Phishing 79

Phishing Insurance Passwords Ransomware 79

IT Governance

NOVEMBER 20, 2023

Date of breach: 26 October 2023 Breached organisation: Homeland, Inc., An investigation found that there was unauthorised access to its network between 18 and 23 May 2023. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IT Governance

DECEMBER 5, 2023

IT Governance’s research has found the following for November 2023: 470 publicly disclosed security incidents. We also discuss the biggest breaches on our 2023 overview of publicly disclosed data breaches and cyber attacks. These figures are similar to last month’s, at 15% and 10% respectively.

Data breaches 113

Data breaches Ransomware Access Security 113

IT Governance

FEBRUARY 1, 2023

Welcome to our January 2023 list of data breaches and cyber attacks. The new year comes with the promise of fresh beginnings and the promise to revolve the bad habits of our past, but we’ve had no such luck in the cyber security sector. million) India’s public education app exposed millions of students’ data (1.6

Data breaches 136

Data breaches Ransomware Insurance Government 136

Thales Cloud Protection & Licensing

APRIL 18, 2023

RSA Conference 2023: Meet Thales Where the World Talks Security! madhav Tue, 04/18/2023 - 07:06 "Alone we can do so little; together we can do so much." - Helen Keller At Thales, we couldn’t be more excited about RSA Conference 2023. This year’s theme “ Stronger Together ” echoes our company culture.

Security 71

Security Digital transformation Privacy Cybersecurity 71

IT Governance

OCTOBER 31, 2023

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). Reeds Spring district alerts families to cybersecurity data breach Date of breach: 26 April 2023 (reported 26 October 2023).

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Krebs on Security

JANUARY 26, 2024

Authorities in Australia, the United Kingdom and the United States this week levied financial sanctions against a Russian man accused of stealing data on nearly 10 million customers of the Australian health insurance giant Medibank. It’s not hard to see why. The attackers who broke into Medibank in October 2022 stole 9.7

Ransomware 242

Ransomware Retail Insurance Government 242

Security Affairs

MAY 29, 2023

MCNA Dental is one of the largest US dental care and oral health insurance providers. The security breach exposed the personal information of current or former provider of dental/orthodontic care to members of certain state Medicaid and Children’s Health Insurance Programs, for which MCNA provides dental benefits and services.

Ransomware 80

Ransomware Insurance Data breaches Access 80

Krebs on Security

MARCH 17, 2023

on March 15, 2023, he led a team of law enforcement agents that made a probable cause arrest of a Conor Brian Fitzpatrick in Peekskill, NY. More recently, BreachForums was the sales forum for data stolen from DC Health Link , a health insurance exchange based in Washington, D.C. that suffered a data breach this month.

Sales 318

Sales Data breaches Insurance Access 318

IT Governance

DECEMBER 19, 2023

When the Russian Cl0p gang exploited a zero-day SQL injection vulnerability in MOVEit Transfer in May 2023, Delta Dental was one of hundreds of organisations whose data was compromised. The data belonged to nearly 7 million individuals. Data breached: personal data belonging to 6,928,932 individuals. Source (New) Construction USA Yes 50.93

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Security Affairs

NOVEMBER 10, 2023

The company became aware of anomalous activity on or about August 22, 2023, and immediately launched an investigation with the help of third-party forensic experts. The investigation revealed that threat actors gained unauthorized access to McLaren’s network between July 28, 2023, and August 23, 2023.

Data breaches 100

Data breaches Ransomware Insurance Manufacturing 100

Krebs on Security

APRIL 16, 2024

State officials said they found out about the hack from federal law enforcement on October 10, 2012. 14, 2023, KrebsOnSecurity published the results of a 10-year investigation into the identity of Rescator , a.k.a. A ten-year retrospective published in 2022 by The Post and Courier in Columbia, S.C. Who is Rescator?

Sales 238

Sales Retail Insurance Access 238

Security Affairs

NOVEMBER 12, 2023

Threat actors exploited the zero-day vulnerability CVE-2023-34362 to hack the file transfer platform and steal the data of the organization. The security breach took place in the State between May 28, 2023, and May 29, 2023. million Teachers Insurance and Annuity Association of America 2.6 million individuals.

Data breaches 102

Data breaches Insurance Education Cybersecurity 102

Security Affairs

NOVEMBER 23, 2023

On July 26, 2023, threat actors hacked the company’s MOVEit Transfer server. “On July 26, 2023, Welltok was alerted to an earlier alleged compromise of our MOVEit Transfer server in connection with software vulnerabilities made public by the developer of the MOVEit Transfer tool. .” million Genworth 2.5

Data breaches 88

Data breaches Insurance Ransomware Education 88

Security Affairs

OCTOBER 30, 2023

62% of hackers plan to train their AI to specialize in the OWASP Top 10 for Large Language Models. One of the most interesting aspects that emerged from the 2023 Hacker-Powered Security Report is the improvement of the patch management process, customers are getting faster at fixing vulnerabilities.

Blockchain 111

Blockchain Insurance Risk Security 111

Data Protection Report

JANUARY 4, 2024

1. As of December 18, 2023, unless the U.S. 5. Headlines in 2023 also had many references to artificial intelligence. 51896 (Aug 4, 2023), available at [link] 2. 6, 2023), available at [link] 3. For those making this quiz a competitive event, we have included a tie-breaker/bonus question.)

Privacy 111

Privacy Cybersecurity Artificial Intelligence e-Discovery 111

Security Affairs

FEBRUARY 28, 2024

The advisory updates to the FBI FLASH BlackCat/ALPHV Ransomware Indicators of Compromise released on April 19, 2022 and on December 19, 2023. “From mid-December 2023 onward, the healthcare sector has emerged as the most frequently targeted among the approximately 70 disclosed victims.” ” reads the joint advisory.

Ransomware 98

Ransomware Government Insurance Manufacturing 98

Security Affairs

JUNE 12, 2023

The attack took place earlier this year, the attackers have exploited the GoAnywhere zero-day vulnerability tracked as CVE-2023-0669. On March 24, 2023, ITx completed its initial review of the logs provided to it by Fortra. ITx began notifying potentially affected data owners on April 11, 2023.”

Data breaches 81

Data breaches Ransomware Insurance Data Privacy 81

Security Affairs

OCTOBER 6, 2023

The company paid third-party experts $10 million to clean up its systems. “The Company has also incurred less than $10 million in one-time expenses in the third quarter related to the cybersecurity issue, which consisted of technology consulting services, legal fees and expenses of other third party advisors.”

Ransomware 110

Ransomware Insurance Cybersecurity IT 110

Security Affairs

NOVEMBER 23, 2023

More specifically, on or about August 15, 2023, AutoZone determined that the exploitation of the vulnerability in the MOVEit application had resulted in the exfiltration of certain data. The Cl0p ransomware gang exploited the zero-day vulnerability CVE-2023-34362 to hack the platforms used by organizations worldwide and steal their data.

Data breaches 102

Data breaches Retail Education Ransomware 102

Security Affairs

DECEMBER 1, 2023

A joint research by Elliptic and Corvus Insurance revealed that the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. It has been used to attack more than 329 organizations globally and has grown to become the fourth-most active strain of ransomware by number of victims in 2022-2023.”

Ransomware 80

Ransomware Blockchain Retail Insurance 80

eSecurity Planet

APRIL 29, 2024

An old Microsoft Windows spooler flaw is added to the CISA KEV list, and the Cactus Ransomware gang currently pursues unfixed Qlik Sense servers with a vulnerability patched in September 2023. Only after additional testing in May 2023 did Brocade accept the vulnerabilities existed, but did not issue patches until December 2023.

Cybersecurity 110

Cybersecurity Ransomware Access Insurance 110

Security Affairs

AUGUST 28, 2023

The Cl0p ransomware gang exploited the zero-day vulnerability CVE-2023-34362 to hack the platforms used by organizations worldwide and steal their data. The data is sourced from state breach notifications, SEC filings, and other public disclosures, as well as the leak site maintained by the Cl0p group, and is current as of August 25, 2023.

Insurance 79

Insurance Ransomware Data breaches Education 79

The Last Watchdog

MARCH 13, 2023

Whether the long anticipated economic downturn of 2023 is a temporary dip lasting a couple quarters or a prolonged period of austerity, CISOs need to demonstrate that they’re operating as cautious financial stewards of capital, a role they use to inform their choices regardless of the reality — or theater — of a recession.

Security 203

Security Insurance Cybersecurity Customer Experience 203

Security Affairs

AUGUST 14, 2023

“While HCPF confirmed that no other HCPF systems or databases were impacted, on June 13, 2023, the investigation identified that certain HCPF files on the MOVEit application used by IBM were accessed by the unauthorized actor on or about May 28, 2023. state of Colorado. CDHE did not disclose the number of impacted individuals.

Data breaches 80

Data breaches Ransomware Education Access 80

The Last Watchdog

AUGUST 9, 2023

9, 2023 – Today, the Fireblocks Cryptography Research Team announced the findings of multiple zero-day vulnerabilities in some of the most used cryptographic multi-party computation (MPC) protocols, including GG-18, GG-20, and implementations of Lindell 17. New York, N.Y.,

Retail 100

Retail Insurance Libraries Paper 100

Security Affairs

MAY 15, 2023

Cisco Talos researchers recently discovered a new ransomware operation called RA Group that has been active since at least April 22, 2023. A sample of the ransomware analyzed by Talos is written in C++ and was compiled on April 23, 2023. The group has already compromised three organizations in the U.S. and one in South Korea.

Ransomware 79

Ransomware Encryption Healthcare Insurance 79

KnowBe4

APRIL 25, 2023

CyberheistNews Vol 13 #17 | April 25th, 2023 [Head Start] Effective Methods How To Teach Social Engineering to an AI Remember The Sims? Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense. Well Stanford created a small virtual world with 25 ChatGPT-powered "people."

Insurance 70

Insurance Security awareness Phishing Ransomware 70

Security Affairs

APRIL 28, 2024

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

Security 90

Security Data breaches Ransomware Mining 90