Security Affairs

AUGUST 31, 2023

Fashion retailer Forever 21 disclosed a data breach that exposed the personal information of more than 500,000 individuals. We have no evidence to suggest your information has been misused for purposes of fraud or identity theft as a result of this incident – and no reason to believe that it will be.”

Retail 127

Retail Data breaches Personal data Ransomware 127

Hunton Privacy

NOVEMBER 14, 2019

On October 22, 2019, the drafting group of China’s National Information Security Standardization Technology Committee (“NISSTC”) released a third set of draft amendments to the Information Security Technology – Personal Information Security Specification (GB/T 35273 – 2017) (the “Updated Draft Specification”).

Information Security 49

Information Security Security Compliance Government 49

Security Affairs

APRIL 23, 2020

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. Somehow, this operation found its way onto the NSA’s radar pre-2013, as far as I can tell, it’s eluded specific coverage from the security industry. Pierluigi Paganini.

Libraries 108

Libraries Cybersecurity Access IT 108

Security Affairs

MARCH 14, 2024

Nissan immediately notified the Australian Cyber Security Centre and the New Zealand National Cyber Security Centre. The company did not share details about the attack or its scope, but a few weeks later the Akira ransomware group claimed to have stolen 100 GB of information from the company.

Data breaches 101

Data breaches Financial Services Ransomware Government 101

Hunton Privacy

JULY 3, 2018

As reported in BNA Privacy Law Watch , on June 27, 2018, Equifax entered into a consent order (the “Order”) with 8 state banking regulators (the “Multi-State Regulatory Agencies”), including those in New York and California, arising from the company’s 2017 data breach that exposed the personal information of 143 million consumers.

Data breaches 53

Data breaches Information Security Privacy Risk 53

Security Affairs

JUNE 26, 2021

Mercedes-Benz USA disclosed a data breach that impacted 1.6 million customers, exposed data includes financial data and social security numbers (SSNs). Mercedes-Benz USA disclosed on Friday a data breach that impacted some of its customers and potential vehicle buyers. The incident exposed approximately 1.6

Data breaches 118

Data breaches Cloud Security Government 118

Security Affairs

OCTOBER 20, 2022

Microsoft disclosed a data leak, sensitive data of some of its customers were exposed by a misconfigured Microsoft server accessible online. Microsoft announced that sensitive data belonging to some of its customers were exposed on the Internet due to a misconfigured Microsoft server. ” reads a post published by Microsoft.

Cloud 128

Cloud Access Authentication Security 128

Hunton Privacy

OCTOBER 15, 2021

Bruck and the Division of Consumer Affairs announced a settlement with Diamond Institute for Infertility and Menopause, LLC, over a data breach that compromised the personal information of 14,663 patients, including 11,071 New Jersey residents. Neafsey said in a statement regarding the breach.

Data breaches 103

Data breaches Privacy Information Security Insurance 103

Dark Reading

JANUARY 15, 2020

million as breach compensation and spend another $1 billion on transforming its information security over the next five years. Company agrees to set aside a minimum of $380.5 The 147 million US consumers affected by the breach have one week from today to file a claim.

Data breaches 73

Data breaches Information Security Security IT 73

Security Affairs

MAY 13, 2023

A data breach disclosed by Toyota Motor Corporation exposed info of more than 2 million customers for ten years Toyota Motor Corporation disclosed a data breach that exposed the car-location information of 2,150,000 customers between November 6, 2013, and April 17, 2023. ” continues the notice.

Data breaches 91

Data breaches Access Authentication Cloud 91

Krebs on Security

NOVEMBER 7, 2019

Hospitals that have been hit by a data breach or ransomware attack can expect to see an increase in the death rate among heart patients in the following months or years because of cybersecurity remediation efforts, a new study posits. “There is a lot of possible research that might be unleashed by this study.

Data breaches 250

Data breaches Ransomware Cybersecurity IT 250

Data Protection Report

FEBRUARY 5, 2018

On 29 December 2017 the Standardization Administration of China issued an Information Security Technology – Personal Information Security Specification ?GB/T GB/T 35273-2017?(the Expanded scope of personal information. the “Specification”), which will come into effect on 1 May 2018.

Information Security 40

Information Security Security Compliance Personal data 40

Hunton Privacy

MARCH 14, 2024

On March 13, 2024, the Federal Communications Commission’s updates to the FCC data breach notification rules (the “Rules”) went into effect. The Order addresses the argument that the Rules are “substantially the same” as breach rules nullified by Congress in 2017. Read our previous blog post to learn more about the Rules.

Data breaches 126

Data breaches Communications Information Security Security 126

Security Affairs

AUGUST 6, 2023

The Colorado Department of Higher Education (CDHE) finally disclosed a data breach impacting students, past students, and teachers after the June attack. In June a ransomware attack hit the Colorado Department of Higher Education (CDHE), now the organization disclosed a data breach.

Education 90

Education Data breaches Ransomware Access 90

Security Affairs

JULY 28, 2021

The ‘Cost of a Data Breach’ report commissioned by IBM Security states that the cost of a data breach exceeded $4.2 The study highlights the significant impact of the ongoing pandemic on the cost of data breaches and the effort to contain them. since the 2017). ” states IBM Security.

Data breaches 140

Data breaches Ransomware Security Cloud 140

Security Affairs

APRIL 29, 2024

wireless carriers $200 million for sharing customers’ real-time location data without consent. wireless carriers nearly $200 million for unlawfully selling access to real-time location data of their customers without consent. Carriers must adopt reasonable measures to prevent unauthorized access to customer data.

Insurance 103

Insurance Communications Access IT 103

Data Protection Report

DECEMBER 5, 2018

On 30 November 2018 the Cyber Security Protection Bureau, under the auspices of the PRC Ministry of Public Security (the “MPS”), issued a draft Guideline for Internet Personal Information Security Protection (the “Guideline”) along with a request for public comments. Introduction. Management Mechanisms.

Information Security 40

Information Security Security Passwords Authentication 40

IT Governance

FEBRUARY 22, 2018

The Information Commissioner’s Office’s (ICO) latest statistics on data security incidents have revealed a 19% increase from Q2 to Q3 2017, with 815 incidents reported between October and December 2017. There was a spike in the number of incidents in which data was sent to the incorrect recipient.

Security 60

Security Information Security Data breaches GDPR 60

Troy Hunt

NOVEMBER 22, 2019

Until this month, I'd never heard of People Data Labs (PDL). I'd certainly heard of the sector they operate in - "Data Enrichment" - but I'd never heard of the company itself. i speak at conferences around the world and run workshops on how to build more secure software within organisations.

Data breaches 143

Data breaches e-Delivery Cloud Information Security 143

Security Affairs

JUNE 12, 2021

McDonald’s fast-food chain disclosed a data breach, hackers have stolen information belonging to customers and employees from the US, South Korea, and Taiwan. The attackers also stole personal information from customers in South Korea and Taiwan, including names, emails, phone numbers, and addresses. Pierluigi Paganini.

Data breaches 134

Data breaches Personal data Phishing Cybersecurity 134

Security Affairs

SEPTEMBER 16, 2022

Uber on Thursday disclosed a security breach, threat actors gained access to its network, and stole internal documents. I announce I am a hacker and Uber has suffered a data breach.” This is not the first time that the company suffered a security breach. We are currently responding to a cybersecurity incident.

Data breaches 138

Data breaches Access Information Security Personal data 138

Hunton Privacy

JULY 1, 2020

The Italian Data Protection Authority ( Garante per la protezione dei dati personali , “Garante”) recently announced that it levied a €600,000 fine on banking institution UniCredit for several violations of the Italian Personal Data Protection Code, in its pre-General Data Protection Regulation (“GDPR”) form.

Data breaches 111

Data breaches GDPR Personal data Education 111

Krebs on Security

DECEMBER 12, 2018

Is it fair to judge an organization’s information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? the security posture of vendor partners). How useful is such a score?

Security 196

Security Energy and Utilities Risk Data breaches 196

Security Affairs

SEPTEMBER 10, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall SonicOS, ImageMagick and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.

IT 111

IT Cybersecurity Access Risk 111

Security Affairs

SEPTEMBER 26, 2018

Uber agrees to $148 million settlement with US States and the District of Columbia over the massive 2016 data breach that exposed personal data of 57 million of its users. The hackers tried to blackmail Uber and demanded $100,000 from the company in exchange for avoiding publish the stolen data. ” continues the AP.

Data breaches 98

Data breaches Personal data Privacy Security 98

Security Affairs

APRIL 12, 2023

Hyundai disclosed a data breach that impacted Italian and French car owners and clients who booked a test drive. Hyundai has suffered a data breach that impacted Italian and French car owners and customers who booked a test drive. According to the letter, financial data were not exposed.

Data breaches 95

Data breaches Manufacturing Cybersecurity Education 95

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 131

Security Phishing Information Security Communications 131

Security Affairs

MAY 6, 2020

A threat actor is offering a database apparently belonging to Pakistan’s leading telecom service, it includes data of 44 Million Pakistani mobile users. It seems that the huge trove of data was the result of a data breach that took place in 2017, the oldest entries are dated back as 2013. Pierluigi Paganini.

Sales 101

Sales Authentication Data breaches Cybersecurity 101

The Texas Record

DECEMBER 21, 2017

Presentation materials from the conference are available on the e-Records 2017 website. Information Governance: Take Control and Succeed. The Public Information Act and Updates from 85th Legislative Session. Establishing Information Governance for Local Governments in Microsoft SharePoint and Office 365.

Information governance 40

Information governance Big data Government Communications 40

IT Governance

OCTOBER 31, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data has been exfiltrated, but we don’t know how much. The data controller of the breached data is currently unclear. Records breached: Unknown.

Data Privacy 52

Data Privacy Privacy Security Data breaches 52

Krebs on Security

DECEMBER 18, 2018

Virtually all companies like to say they take their customers’ privacy and security seriously, make it a top priority, blah blah. That’s because very few of the world’s biggest companies list any security executives in their highest ranks. Nor is the average pay hugely different among all three roles.

Security 222

Security Marketing Cybersecurity Data breaches 222

Security Affairs

JUNE 3, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added an Oracle WebLogic Server vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The issue, tracked as CVE-2017-3506 (CVSS score 7.4), is an OS command injection. The vulnerability resides in the Oracle WebLogic Server component of Oracle Fusion Middleware.

IT 115

IT Access Cybersecurity Risk 115

Security Affairs

APRIL 15, 2023

Siemens Metaverse, a virtual space built to mirror real machines, factories, and other highly complex systems, has exposed sensitive data, including the company’s office plans and internet of things (IoT) devices. We can’t say for sure how much of the aforementioned data could be accessed using the ComfyApp credentials alone. “We

IoT 98

IoT Manufacturing Authentication Ransomware 98

Security Affairs

MARCH 9, 2023

The latest Cybernews discovery showcases that popular car brands sometimes leave their doors open, as if inviting threat actors to feast on their client data. million vehicles a year, potentially exposed its business secrets and client data. million vehicles a year, potentially exposed its business secrets and client data.

Manufacturing 95

Manufacturing Access Phishing Passwords 95

Hunton Privacy

JULY 22, 2019

states and territories to resolve investigations into the colossal data breach the company suffered in 2017. This is the largest data breach settlement in U.S. Equifax, one of America’s three main credit bureaus, stores personal information relating to hundreds of millions of individuals.

Data breaches 45

Data breaches Information Security Security IT 45

IT Governance

JUNE 5, 2018

The Information Commissioner’s Office (ICO) has fined London surgery Bayswater Medical Centre (BMC) £35,000 after highly sensitive medical information was left unsecured in an empty building. It was also reported that the premises were secured by just one lock. Better protect your information assets. What happened?

Security 80

Security Information Security Access Personal data 80

Security Affairs

DECEMBER 6, 2020

Italian police arrested two people that have stolen 10 GB of confidental and alleged secret data from the defense company Leonardo S.p.A. Italian police have arrested two people that have been accused of stealing 10 GB of confidental data and military secrets from defense company Leonardo S.p.A.

Military 107

Military Computer and Electronics Communications Personal data 107