Data Breach Today

AUGUST 10, 2023

Authorities in Multiple Countries Arrest Operators of 16shop An international law enforcement operation took down a phishing-as-a-service website that security researchers say was responsible for more than 150,000 phishing domains. The site, 16shop, sold phishing kits that targeted more than 70,000 people in 43 countries.

Phishing 240

Phishing Security 240

Krebs on Security

MAY 12, 2022

Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. “Law Enforcement Inquiry and Alerts (LEIA) allows for a federated search of 16 Federal law enforcement databases.”

Authentication 264

Authentication Passwords Government Access 264

Data Breach Today

MAY 5, 2022

Rules Similar to Privacy Laws Passed in California, Colorado, Virginia and Utah Connecticut has just become the fifth U.S. state to get a comprehensive data privacy and online monitoring law, as Senate Bill No. 6 passed into law on Wednesday.

Data Privacy 284

Data Privacy Privacy Compliance 284

Data Breach Today

SEPTEMBER 9, 2022

law enforcement investigation involving multiple countries resulted in the shutdown of an online marketplace selling millions of Social Security numbers, payment cards and other credentials. US, Europe Take Action on Marketplace for Selling Personal Data A U.S.

Personal data 241

Personal data Security 241

Data Breach Today

JUNE 22, 2023

NCSC Says Lawyers Assaulted by Novice Hackers, Ransomware and Nation-State Groups British law firms are at increased risk of being hacked due to a growing number of cybercrime-as-a-service groups, the country's top cybersecurity agency warned in a new advisory.

Risk 233

Risk Ransomware Cybersecurity 233

Data Breach Today

AUGUST 15, 2023

153,000 Individuals Affected in Hack, Including Client Linked to an Earlier Breach A global law firm that handles data breach litigation is faced with defending itself against a proposed class action lawsuit filed in the aftermath of its own data breach.

Data breaches 246

Data breaches IT 246

Data Breach Today

DECEMBER 23, 2022

President Joe Biden signed into law the Quantum Computing Cybersecurity Preparedness Act, designed "to encourage the migration of federal government IT systems to quantum-resistant cryptography" by ensuring they prepare strategies now for implementing forthcoming cryptography standards.

IT 270

IT Cybersecurity Government 270

Data Breach Today

JULY 24, 2023

Client Files Breached Included Data of Vision Benefits Plan Members A global law firm is notifying nearly 153,000 individuals of a hacking incident that compromised several client files. The files contained sensitive personal information and affects vision care patients who had been victims of a breach three years ago.

228

228

Data Breach Today

APRIL 12, 2022

Alleged Founder, 2 Accomplices Arrested; $500K Worth Crypto Assets Frozen A year-long joint operation by law enforcement agencies across several countries led to the shuttering of darknet marketplace RaidForums and the seizure of three domains hosting the website.

IT 241

IT 241

Data Breach Today

DECEMBER 22, 2020

Move Seen as Alternative to Weakening Encryption Europol, the European Union's law enforcement agency, and the European Commission are launching a new decryption platform to help law enforcement agencies decrypt data that has been obtained as part of a criminal investigation, a move seen as an alternative to weakening encryption.

Encryption 292

Encryption 292

Data Matters

MARCH 21, 2024

The AI Act is the world’s first horizontal and standalone law governing AI, and a landmark piece of legislation for the EU. The post EU Formally Adopts World’s First AI Law appeared first on Data Matters Privacy Blog.

Artificial Intelligence 88

Artificial Intelligence Privacy Government 88

Data Breach Today

AUGUST 30, 2022

Defense Expert: Why International Law Doesn't Effectively Deter Cyberattacks in War Applying international laws used for armed conflicts to the cyber domain remains elusive because of a lack of precedent and poor visibility in cyberspace.

Government 242

Government 242

Security Affairs

APRIL 18, 2024

An international law enforcement operation led to the disruption of the prominent phishing-as-a-service platform LabHost. An international law enforcement operation, codenamed Nebulae and coordinated by Europol, led to the disruption of LabHost, which is one of the world’s largest phishing-as-a-service platforms.

Phishing 105

Phishing Passwords Authentication IT 105

The Last Watchdog

NOVEMBER 7, 2023

Many individuals are curious about the strategies employed by law enforcement agencies to monitor and respond to these threats. Threat intel sharing Law enforcement agencies depend on multiple channels to aid their efforts against cyber threats. The primary source is the affected organization or individual.

Cybersecurity 163

Cybersecurity Ransomware IT Security 163

Security Affairs

FEBRUARY 19, 2024

An international law enforcement operation codenamed ‘Operation Cronos’ led to the disruption of the LockBit ransomware operation. A joint law enforcement action, code-named Operation Cronos, conducted by law enforcement agencies from 11 countries has disrupted the LockBit ransomware operation.

Energy and Utilities 114

Energy and Utilities Ransomware Agriculture Financial Services 114

Data Breach Today

JULY 7, 2023

Enhanced Police Powers Added to Bill Focused on Securing Digital Space The French government is pursuing a new law that will grant the country's law enforcement agencies sweeping power to snoop on suspected cybercriminals and other online miscreants by remotely accessing their phones and computers.

Government 144

Government Access Security 144

Data Breach Today

FEBRUARY 26, 2021

House committees held their first public hearings into the SolarWinds attack, with lawmakers and witnesses offering support for expanding federal cybersecurity laws to address the security failures. Lawmakers and Witnesses See Expanded Role for CISA Following Attack A pair of U.S.

Cybersecurity 333

Cybersecurity Security 333

Data Breach Today

JULY 5, 2023

Experts Say China Aims to Retaliate Against US Tech Companies, Dissidents Experts believe China's revised Counter-Espionage Law gives the Chinese Communist Party the power to retaliate against Western financial and technological sanctions and also control rising discontent among Chinese citizens. The law went into effect on Saturday.

144

144

Hunton Privacy

MARCH 13, 2024

On March 6, 2024, Governor Chris Sununu signed into law SB 255 , making New Hampshire the 15th state with a comprehensive privacy law. Controller Obligations Similar to most of the comprehensive state privacy laws, SB 255 contains fundamental data minimization, purpose limitation and data protection requirements.

Privacy 120

Privacy Personal data Sales Risk 120

Data Breach Today

MARCH 8, 2023

A French law requiring companies to report cyber incidents to authorities within 72 hours or lose their eligibility for cyber insurance reimbursement has practitioners scratching their heads. Should French Multinationals Report Breaches Outside France?

Insurance 144

Insurance 144

Data Breach Today

NOVEMBER 27, 2020

Europol, Group IB Analyzed 90,000 Pieces of Card Data During The Three-Month Long Operation Europol, along with the other law enforcement agencies in Europe, prevented payment fraud losses of $47.5 million by targeting fraudsters that were selling stolen card data on darknet websites known as card shops.

329

329

Security Affairs

JANUARY 6, 2024

Law firm Orrick, Herrington & Sutcliffe disclosed a data breach that took place in early 2023, which impacted roughly 600,000 individuals. The law firm Orrick, Herrington & Sutcliffe, disclosed a data breach that impacted 638,000 individuals. “Orrick also notified law enforcement.

Data breaches 114

Data breaches Insurance Access Cybersecurity 114

Data Breach Today

JULY 27, 2021

Senate Judiciary Committee Hears Testimony from DOJ, FBI, CISA Congress needs to update and expand federal laws to combat the surge in ransomware attacks, federal cybersecurity experts told a Senate committee at a Tuesday hearing.

Ransomware 274

Ransomware Cybersecurity 274

Data Breach Today

SEPTEMBER 9, 2022

Besides a Lag in Reporting, Some of the Compromised Data Was a Decade-Old A Michigan law firm recently told regulators about a hacking incident discovered nearly a year ago that has affected the protected health information of more than 255,000 individuals, including members of a Michigan health plan.

241

241

Data Breach Today

APRIL 6, 2023

We're Running Stresser/Booter Distributed Denial-of-Service Sites,' Cops Caution Warning to criminals: Could that cybercrime service you're about to access really be a sting by law enforcement agents who are waiting to identify and arrest you?

Honeypots 130

Honeypots Access 130

Data Matters

APRIL 16, 2024

The post EU Formally Adopts Cyber Law for Connected Products appeared first on Data Matters Privacy Blog.

Privacy 88

Privacy Security IoT 88

Data Breach Today

APRIL 2, 2020

Privacy Advocates Criticize Measure That Microsoft Supported Washington's governor has signed a new law that regulates the use of facial recognition technology. But some privacy advocates say the measure, which was backed by Microsoft, doesn't do enough to protect individuals' rights.

Privacy 262

Privacy 262

Data Breach Today

OCTOBER 22, 2021

FBI, US Secret Service and US Cyber Command Target Ransomware Gangs, Reuters Reports The outages of the notorious REvil - aka Sodinokibi - ransomware operation have been due to a coordinated law enforcement effort involving the U.S. and foreign partners, aimed at disrupting the group's attack capabilities, Reuters reports.

Ransomware 190

Ransomware 190

Data Breach Today

MAY 19, 2021

Federal Officials, Legal Expert Debate the Issue at RSA 2021 Since the supply chain attack that targeted SolarWinds was uncovered in December 2020, some members of Congress have been pushing for a nationwide data breach notification law.

Data breaches 233

Data breaches 233

Data Breach Today

JUNE 18, 2021

Closing EncroChat and Sky, Plus Careful Word-of-Mouth Management, Drove Anom Uptake The global law enforcement "Anom" honeypot operation racked up impressive statistics for the number of criminals tricked into using the encrypted communications service.

Honeypots 227

Honeypots Encryption Communications 227

Data Matters

NOVEMBER 2, 2023

The Information Commissioner’s Office (“ ICO ”) has introduced a toolkit on data sharing with law enforcement (“ Toolkit ”) which supplements the ICO’s existing guidance on sharing personal data with law enforcement authorities.

Personal data 157

Personal data Privacy 157

Data Breach Today

FEBRUARY 11, 2021

Regulation Requires Russians to Disclose Their Cryptocurrency Transactions - Or Else Did Russia pass a tough new cryptocurrency law to help authorities recruit or compel criminal hackers to assist the government?

Government 233

Government 233

Data Breach Today

FEBRUARY 13, 2024

ACt Will Require Developers to Allows A Copyright Holder Opt Out Two key European Parliament committees accepted a political compromise set to govern how trading bloc countries develop and deploy artificial intelligence. The regulation is set to become the globe's first comprehensive AI regulation.

Artificial Intelligence 289

Artificial Intelligence Government 289

Data Breach Today

SEPTEMBER 9, 2021

Experts Deconstruct New Law for Global Firms Operating in China China’s personal information protection law focuses in part on localization, stronger security and governance frameworks. 1 compliance deadline.

Compliance 167

Compliance Privacy Government Security 167

Data Breach Today

NOVEMBER 10, 2023

Cybersecurity Concerns Persist Over the Revised eIDAS Web Certificate Mandate European Union lawmakers and trading bloc governments reached a provisional agreement on a revised identity framework intended to digitize access to key public services for the majority of Europeans by the start of the next decade.

Cybersecurity 292

Cybersecurity Government Access 292

Data Breach Today

JANUARY 17, 2023

Ransomware Hacking Incident Could Prove Costly for the Private Health Insurer Three Australian law firms teamed up in a bid to have private health insurer Medibank pay victims of a data breach caused by Russian ransomware hackers up to $20,000 per person.

Insurance 130

Insurance Data breaches Ransomware 130

Hunton Privacy

JANUARY 19, 2024

On January 16, 2024, Governor Phil Murphy signed into law Bill 332 , making New Jersey the 14 th state with a comprehensive state privacy law. The law is set to take effect in January 2025. The law does not contain an exemption for non-profit organizations.

Privacy 97

Privacy Personal data Sales Risk 97