article thumbnail

City of Dallas has set a budget of $8.5 million to mitigate the May Royal ransomware attack

Security Affairs

The City experts believe that the group specifically targeted a prioritized list of servers using legitimate Microsoft system administrative tools. Early on the morning of Wednesday, May 03, 2023, the group started executing the ransomware on the City of Dallas. The Dallas City Council has approved a budget of $8.5

article thumbnail

First Multistate HIPAA Data Breach Lawsuit May Signal Increased State Interest in Data Security Enforcement

Data Matters

The stolen information allegedly included names and identifying information, hashed passwords, security questions and answers, family information, Social Security numbers, lab results, health insurance information, doctor’s names, and medical conditions, among other things.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

£60 million in recovery costs for Norsk Hydro after refusing ransom demand

IT Governance

On 19 March 2019, Norsk Hydro’s systems were infected with the LockerGoga ransomware. TrendMicro’s analysis into the ransomware found that it was the same system administration tool abused by the likes of SOREBRECT and Bad Rabbit. That said, there are a few ways to mitigate the risk. How the incident occurred.

article thumbnail

Georgia Governor Vetoes Broad-Reaching Computer Crime Bill, Highlighting Debate Around Bug Bounty Programs

Data Matters

Specifically, researchers believed that the current version of SB 315 could chill security research—both the purely academic and the “white hats”—ultimately discouraging individuals from identifying vulnerabilities in networks and alerting system administrators of the issues. The incident and Uber’s response prompted the U.S.

article thumbnail

Italy: Privacy law integrating the GDPR adopted, what to do?

DLA Piper Privacy Matters

This seems a strong limitation, but among the conducts whose breach can lead to criminal penalties there are also those provided by the ePrivacy Directive in relation to marketing communications which makes the potential risk quite high. Privacy-related compliance organization supplemented.

GDPR 45
article thumbnail

CyberheistNews Vol 13 #19 [Watch Your Back] New Fake Chrome Update Error Attack Targets Your Users

KnowBe4

Users can become desensitized to the potential risks bogus messages concerning IT issues carry with them. The risk obviously is that this killer app will devolve into social engineering at scale. New Jersey appellate division judges rejected the insurers' argument that the 2017 attack, which U.S. must help cover $1.4

article thumbnail

CyberheistNews Vol 13 #11 [Heads Up] Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

KnowBe4

million workers at its client companies because of the risk of leaking confidential info, client data, source code, or regulated information to the LLM. "In In another case, a doctor input his patient's name and their medical condition and asked ChatGPT to craft a letter to the patient's insurance company.