Krebs on Security

APRIL 26, 2021

In 2017, KrebsOnSecurity showed how easy it is for identity thieves to undo a consumer’s request to freeze their credit file at Experian , one of the big three consumer credit bureaus in the United States. “They’re allowing this huge security gap so they can make a profit. And this has been going on for at least four years.”

Security 321

Security Authentication Access Insurance 321

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Security Affairs

MAY 9, 2020

” Between January 30 and April 30, 2020, the researchers observed three SilverTerrier groups launching ten COVID-19-themed malware campaigns, some of them also targeted organizations involved in the COVID-19 response. .” “On April 8, 2020, we witnessed the most recent campaign by this actor. billion in global losses.

Government 67

Government Energy and Utilities Insurance Phishing 67

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. SEC Statement and Guidance on Public Company Cybersecurity Disclosures.

Cybersecurity 66

Cybersecurity Financial Services Risk Compliance 66

Troy Hunt

NOVEMBER 14, 2023

That's the context that accompanied a massive trove of data that was sent to me 2 years ago now. I looked into it, tried to attribute and verify it then put it in the "too hard basket" and moved onto more pressing issues. One of the first things I do after receiving a data breach is to literally just Google it: acuity data breach.

Insurance 120

Insurance Data breaches Mining IT 120

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 66

Financial Services Cybersecurity Insurance Risk 66

AIIM

APRIL 21, 2022

It doesn’t matter if you’re an insurance company, local government agency, or something else. Back in 2017, AIIM concluded that at the heart of every Digital Transformation journey was the need to understand, anticipate, and redefine internal and external customer expectations. A few days later, a box arrived at my front door.

Customer Experience 151

Customer Experience Digital transformation Insurance Government 151

eDiscovery Daily

MARCH 23, 2020

March 13, 2020) , Florida Magistrate Judge Jonathan Goodman ruled that the defendant “anticipated litigation approximately midway between the two extreme positions urged by the clients” after reviewing in camera the filed-under-seal documents for which the defendant asserted work product protection. Here’s one. Covington Specialty Ins.,

Insurance 56

Insurance Education IT 56

eDiscovery Daily

OCTOBER 21, 2021

In an aggravated arson and insurance fraud case, Ross Compton’s guilt was proven by his pacemaker. 2] Erik De La Garza, “Charges Dropped in Amazon Echo Murder Case,” Courthouse News Service, November 29, 2017, [link]. [3] The defendant objected to its admittance, claiming that it violated New York’s wiretapping and eavesdropping law.

IoT 74

IoT e-Discovery Insurance Access 74

Data Protection Report

APRIL 22, 2021

On April 14, 2021, the New York Department of Financial Services (NYDFS) announced a $3 million settlement with insurance company National Securities Corp. NSC), relating to violations of three different requirements of the NYDFS cybersecurity regulation during the period 2018 to 2020. NYDFS Cybersecurity Regulation.

Cybersecurity 94

Cybersecurity Financial Services Phishing Compliance 94

HL Chronicle of Data Protection

FEBRUARY 25, 2020

The NYDFS Regulation originally came into effect on March 1, 2017, and provided for a two-year implementation plan for companies to develop a robust cybersecurity program. Finally, Governor Andrew Cuomo released a proposal in the administration’s 2020 Agenda that would significantly enlarge NYDFS’ mission and funding.

Cybersecurity 104

Cybersecurity Financial Services Data breaches Insurance 104

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. This post summarizes the highlights from this meeting. groups with non-U.S.

Insurance 66

Insurance Paper Risk Big data 66

Hunton Privacy

JULY 24, 2020

On Wednesday, July 22, the New York Department of Financial Services (the “NYDFS”) announced that it had filed administrative charges against First American Title Insurance Co. under the NYDFS Cybersecurity Regulation , marking the agency’s first enforcement action since the rules went into effect in March 2017. NYCRR 500.14(b):

Cybersecurity 85

Cybersecurity Risk Financial Services Insurance 85

Reltio

JUNE 12, 2020

1-2 Previous Roles & Companies: Worked as a consultant with general insurers, Lloyd’s market firms, brokers and reinsurers, including Beazley Group and RSA. Summary: Charles specializes in data governance, data quality and data strategy for the insurance industry. Company: DataZed. Years in Position: Over 10 years.

Insurance 52

Insurance Customer Experience B2B MDM 52

eSecurity Planet

SEPTEMBER 14, 2022

According to statistics from the FBI’s 2021 Internet Crime Report , complaints to the Internet Crime Complaint Center (IC3) have been rising since 2017. billion in reported losses, up from 2020’s 791,790 complaints and $4.2 Finance and insurance finished a close second at 22.4%. billion in reported losses. Individuals.

Energy and Utilities 120

Energy and Utilities Phishing Blockchain Cybersecurity 120

IT Governance

APRIL 10, 2019

Implementation status : Transposed, as the National Cyber Strategy of the Czech Republic for 2015–2020. I 2017 of 29 June 2017) amending the Act on the Federal Office for Information Security, Atomic Energy Act, Energy Industry Act, Social Insurance Code V and the Telecommunications Act. Czech Republic. 360 of 2018.

Compliance 52

Compliance Information Security Government Insurance 52

Data Matters

AUGUST 24, 2018

The National Association of Insurance Commissioners (NAIC) held its Summer 2018 National Meeting in Boston, Massachusetts, from August 4 to 7, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data . The NAIC is also considering insurers’ use of big data in underwriting life insurance products.

Insurance 60

Insurance Big data e-Delivery Risk 60

Getting Information Done

APRIL 18, 2017

billion connected devices to over 50 billion by 2020), a focus on people and process must move up in prominence to mount a coordinated defense and, eventually, an offense. billion connected devices to over 50 billion by 2020), a focus on people and process must move up in prominence to mount a coordinated defense and, eventually, an offense.

Government 53

Government Cybersecurity Insurance Information governance 53

eSecurity Planet

FEBRUARY 16, 2021

Just in 2020, the SolarWinds hack could’ve been prevented for organizations that promptly patch software. The internet is fraught with peril these days, but nothing strikes more fear into users and IT security pros than the threat of ransomware. A ransomware attack is about as bad as a cyber attack can get. Jump to: What is ransomware?

Ransomware 97

Ransomware Encryption Insurance Cloud 97

Data Matters

FEBRUARY 25, 2021

This follows the FCA’s announcement in its 2020-21 business plan that payment services were one of its main supervisory priorities 1 and its temporary guidance of July 9, 2020, on prudential risk management and safeguarding in light of the COVID-19 pandemic ( Temporary COVID Guidance ). its Perimeter Guidance Manual (PERG).

Authentication 66

Authentication Paper Risk Insurance 66

eDiscovery Daily

DECEMBER 17, 2019

In this case involving a bad faith claim against the plaintiff’s insurance company for its handling of her claim under her uninsured motorist benefits, the defendant took a recorded statement from the plaintiff in the course of its investigation but lost it. Happy holidays and see you in 2020! : Judge’s Ruling.

Insurance 56

Insurance Education IT Access 56

Data Protection Report

JANUARY 7, 2019

Entities covered by the Regulation, which includes not only banks and insurers, but also other financial service institutions and licensees regulated by the DFS that utilize third-party service providers, will be required to implement third-party risk management programs by March 1. Third-party service provider risk management program.

Cybersecurity 40

Cybersecurity Compliance Financial Services Risk 40

Data Matters

AUGUST 5, 2019

Furthermore, although entities that already comply with the breach notification requirements under certain state or federal laws (such as the Health Insurance Portability and Accountability Act (HIPAA), the New York Department of Financial Services cybersecurity regulations (23 N.Y.C.R.R.

Cybersecurity 66

Cybersecurity Data breaches Privacy Risk 66

Data Matters

MAY 9, 2019

The National Association of Insurance Commissioners (NAIC) held its Spring 2019 National Meeting (Spring Meeting) in Orlando, Florida, from April 6 to 9, 2019. ceding insurer could be eligible for the same reduced collateral requirements that would apply to qualifying EU reinsurers under the revised CFR Model Laws.

Insurance 66

Insurance Blockchain Big data Risk 66

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. Its final status, however, is far from clear.

Privacy 58

Privacy Sales Compliance Government 58

IT Governance

DECEMBER 27, 2019

Victims of Equifax’s 2017 data breach were given the go-ahead to launch a class-action lawsuit. A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. IT Governance is closing out the year by rounding up 2019’s biggest information security stories.

Data breaches 55

Data breaches GDPR Passwords Personal data 55

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. Its final status, however, is far from clear.

Privacy 58

Privacy Sales Education Compliance 58

Security Affairs

NOVEMBER 29, 2019

Group-IB, has analyzed key recent changes to the global cyberthreat landscape in the “Hi-Tech Crime Trends 2019/2020” report. The new “ Hi-Tech Crime Trends 2019/2020 ” report describes attacks on various industries and critical infrastructure facilities, as well as campaigns aimed at destabilization of the Internet in certain countries.

IT 89

IT Military Cybersecurity Phishing 89

ARMA International

SEPTEMBER 27, 2021

This includes defining the product scope of the DT journey and the digital products and services that will deliver transformative change for a new future. Here, Part 3 discusses how to manage the various DT risks. One essential step is developing the DT business case and connecting it with the critical success factors (CSFs) and the product scope.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54

Data Protection Report

MAY 23, 2018

The Commission also released a “ Next Steps ” document, which clearly sets out actions to be taken by the European Commission toward Member States, data protection authorities (“DPAs”), and citizens and businesses/organizations processing data through the year 2020. What do we expect in terms of enforcement priorities? Challenge #2.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Adam Levin

MAY 19, 2021

Experian, 2020: A data breach impacted 24 million Experian customers, plus almost 800,000 businesses in South Africa. Equifax, 2017: A data breach impacted almost 150 million Equifax customers, who subsequently reported identity-related crimes using that data. Significant data breaches at credit score bureaus include: . Takeaways .

Risk 87

Risk Data breaches Cybersecurity Insurance 87

eSecurity Planet

OCTOBER 5, 2021

Banking, financial services, and insurance industries constitute the largest share of adopters, with North America leading adoption, according to Orbis Research. When this is happening, it’s clear that organizations either aren’t using MFA or are finding ways around it. Clearly, MFA can’t work for everything. Passwords alone won’t cut it.

Authentication 104

Authentication Passwords Access Computer and Electronics 104

eDiscovery Daily

JANUARY 8, 2020

It’s also worth noting that Tom O’Connor and I will once again be discussing some of these cases – and what the legal profession can learn from those rulings – on our webcast on Wednesday, January 29 th – Important eDiscovery Case Law Decisions of 2019 and Their Impact on 2020 at noon CT (1pm ET, 10am PT). Hospital Partners, Inc. Stay tuned!

e-Discovery 45

e-Discovery Privacy Computer and Electronics Insurance 45

eSecurity Planet

JANUARY 11, 2022

Series A Cado Security 2020 London, UK 26 $11.5 Series B Wiz 2020 Tel Aviv, Israel 186 $230.0 Series A SenseOn 2017 London, UK 61 $26.4 With evolving attack methodologies due to machine learning, quantum computing, and sophisticated nation-state hackers, security startups are receiving record funding. Series B SECURITI.ai

Cybersecurity 142

Cybersecurity Cloud Compliance Analytics 142

Adam Levin

DECEMBER 7, 2020

The cybersecurity industry faced a challenging combination of new and familiar challenges in 2020. In 2020, hackers actively exploited the Covid-19 pandemic as well as the resulting unemployment. 2020 saw a record number of ransomware attacks, and we can expect more of the same in 2021. Economic stimulus checks were targeted.

IoT 52

IoT Artificial Intelligence Passwords Phishing 52

eSecurity Planet

APRIL 26, 2022

Company Sector Year Status Isovalent Cloud security 2020 Private Illumio Cloud security 2015 Private SignalFx Monitoring 2015 Acquired: Splunk CipherCloud Cloud security 2012 Acquired: Lookout Lookout Mobile security 2011 Private. Accel’s largest presence is in the Bay Area with sizable teams in London and Bangalore. AllegisCyber Capital.

Cybersecurity 128

Cybersecurity Cloud Marketing Security 128