Data Breach Today

JUNE 28, 2024

InfoSys McCamish Systems Earlier Alerted 57,000 Bank of America Clients of Breach Infosys McCamish Systems, an insurance software product and services vendor, is notifying nearly 6.1

Insurance 130

Insurance Ransomware Security 130

Security Affairs

AUGUST 10, 2024

In November 2023, McLaren Health Care (McLaren) disclosed a data breach that occurred between late July and August 2023. The company became aware of anomalous activity on or about August 22, 2023, and immediately launched an investigation with the help of third-party forensic experts. million of McLaren Health Care patients.

Ransomware 332

Ransomware Insurance Data breaches Access 332

Security Affairs

FEBRUARY 3, 2024

Cleaning products giant Clorox estimates the economic impact of the cyber attack that hit the company in August 2023 at $49 million. According to a filing with SEC, Clorox estimates the economic impact of the cyber attack that hit the company in August 2023 at $49 million. ” reads the SEC filing.

Insurance 345

Insurance Sales Ransomware Marketing 345

Security Affairs

APRIL 8, 2024

The data breach occurred on May 30, 2023, and was discovered on February 7, 2024. “On May 30, 2023, we detected unusual activity on our internal network, and we promptly took steps to mitigate the incident. The company announced that it deleted DOJ data from its systems after the incident.

Data breaches 346

Data breaches Insurance Cybersecurity Government 346

Security Affairs

JANUARY 4, 2024

HEC discovered that an unknown actor gained access to some of its systems between July 14, 2023 and July 23, 2023, and copied some files. The healthcare firm began notifying impacted clients on October 26, 2023, and worked with them to notify potentially impacted individuals. ” concludes the notice.

Data breaches 345

Data breaches Artificial Intelligence Insurance Access 345

The Last Watchdog

JULY 27, 2023

New York, NY, July 27, 2023 – QBE North America today announced the launch of a cyber insurance program with new MGA, Converge, acting as program administrator. Tom Kang, CEO, Converge, added, “We’re thrilled to partner with QBE North America given their experience and reputation in the cyber insurance market.

Insurance 188

Insurance Risk Retail Marketing 188

Security Affairs

MAY 14, 2024

The Singing River Health System revealed that the ransomware attack that hit the organization in August 2023 impacted 895,204 people. At the end of August 2023, the systems at three hospitals and other medical facilities operated by Singing River Health System (SRHS) were hit by a Rhysida ransomware attack.

Ransomware 331

Ransomware Data breaches Insurance Paper 331

The Last Watchdog

DECEMBER 12, 2023

A look back at the cybersecurity landscape in 2023 rings all-too familiar: cyber threats rapidly evolved and scaled up , just as they have, year-to-year, for the past 20 years. Eyal Benishti , CEO, IRONSCALES Benishti Generative AI (GenAI) reshaped cybersecurity in 2023. What should I be most concerned about – and focus on – in 2024?

Cybersecurity 258

Cybersecurity Phishing Authentication Analytics 258

KnowBe4

OCTOBER 17, 2023

Popular cyber insurers are claiming that cybercriminals made ransomware attacks popular again in 2023 after a slight break in 2022.

Insurance 124

Insurance Ransomware 124

Security Affairs

NOVEMBER 10, 2023

The company became aware of anomalous activity on or about August 22, 2023, and immediately launched an investigation with the help of third-party forensic experts. The investigation revealed that threat actors gained unauthorized access to McLaren’s network between July 28, 2023, and August 23, 2023.

Data breaches 342

Data breaches Ransomware Insurance Manufacturing 342

Security Affairs

DECEMBER 9, 2023

Norton Healthcare disclosed a data breach after a ransomware attack that hit the organization on May 9, 2023. “On May 9, 2023, Norton Healthcare discovered that it was experiencing a cybersecurity incident, later determined to be a ransomware attack.” ” reads the notice of security incident.

Data breaches 342

Data breaches Ransomware Insurance Access 342

Security Affairs

NOVEMBER 12, 2023

Threat actors exploited the zero-day vulnerability CVE-2023-34362 to hack the file transfer platform and steal the data of the organization. The security breach took place in the State between May 28, 2023, and May 29, 2023. million Teachers Insurance and Annuity Association of America 2.6 million individuals.

Data breaches 352

Data breaches Insurance Education Cybersecurity 352

Security Affairs

NOVEMBER 23, 2023

On July 26, 2023, threat actors hacked the company’s MOVEit Transfer server. “On July 26, 2023, Welltok was alerted to an earlier alleged compromise of our MOVEit Transfer server in connection with software vulnerabilities made public by the developer of the MOVEit Transfer tool. .” million Genworth 2.5 million “U.S.-based

Data breaches 339

Data breaches Insurance Ransomware Education 339

Security Affairs

JULY 11, 2024

The ransomware attack that hit Dallas County in October 2023 has impacted more than 200,000 individuals exposing their personal information. In October 2023 the Play ransomware group hit Dallas County, Texas, and added the city to its Tor leak site claiming the theft of sensitive documents from multiple departments.

Ransomware 321

Ransomware Data breaches Cybersecurity Insurance 321

Security Affairs

JANUARY 6, 2024

Law firm Orrick, Herrington & Sutcliffe disclosed a data breach that took place in early 2023, which impacted roughly 600,000 individuals. “On March 13, 2023, Orrick detected that an unauthorized third party gained remote access to a portion of its network, including a file share that Orrick used to store certain client files.”

Data breaches 338

Data breaches Insurance Access Cybersecurity 338

Security Affairs

MAY 27, 2024

Prescription service company Sav-Rx disclosed a data breach after 2023 cyberattack. The investigation conducted by the company with the help of external cybersecurity experts revealed that threat actors first gained access to the IT System on or around October 3, 2023. million people in the United States. ” states the company.

Data breaches 336

Data breaches Cybersecurity Insurance Access 336

KnowBe4

SEPTEMBER 28, 2023

The latest cyber claims report from Coalition , a digital risk insurance provider, finds a 12% increase in cyber insurance claims in the first half of 2023 over the second half of 2022, due to surging attack frequency and severity.

Insurance 122

Insurance Risk Ransomware Security 122

Security Affairs

NOVEMBER 2, 2023

“On October 12, 2023, Rightway informed Okta that an unauthorized actor gained access to an eligibility census file maintained by Rightway in its provision of services to Okta. Rightway has indicated that the unauthorized activity occurred on September 23, 2023.”

Data breaches 353

Data breaches Insurance Access Authentication 353

Security Affairs

SEPTEMBER 4, 2023

The BaFin is responsible for overseeing banks, insurance companies, investment firms, and other financial institutions. The Authority announced the adoption of adequate security precautions and effective defensive measures immediately after the attack started on Friday, September 1st, 2023.

Financial Services 357

Financial Services Military Insurance Marketing 357

Security Affairs

MAY 29, 2023

MCNA Dental is one of the largest US dental care and oral health insurance providers. The security breach exposed the personal information of current or former provider of dental/orthodontic care to members of certain state Medicaid and Children’s Health Insurance Programs, for which MCNA provides dental benefits and services.

Ransomware 246

Ransomware Data breaches Insurance Government 246

Security Affairs

APRIL 4, 2024

bank account number and/or credit card details), health insurance information, medical records and information about medical history and/or associated conditions, and/or unique identifiers to associate individuals with City of Hope (e.g., medical record number).”

Data breaches 318

Data breaches Insurance Security Government 318

Security Affairs

SEPTEMBER 23, 2023

In May 2023, a ransomware attack hit the IT systems at the City of Dallas , Texas. Between April 7, 2023, and May 4, 2023, Royal performed data exfiltration and ransomware delivery preparation activities. ” The group was able to steal data from the City and leaked approximately 1.169 TB at a time prior to May 03, 2023.

Ransomware 336

Ransomware Encryption Systems administration Cybersecurity 336

Security Affairs

MAY 12, 2024

In December 2023, Elliptic and Corvus Insurance published a joint research that revealed the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. ” reads the CSA.

Ransomware 357

Ransomware Blockchain Retail Insurance 357

Security Affairs

JUNE 29, 2024

Infosys McCamish Systems (IMS) revealed that the 2023 data breach following the LockBit ransomware attack impacted 6 million individuals. IMS specializes in providing business process outsourcing (BPO) and information technology (IT) services specifically tailored for the insurance and financial services industries.

Data breaches 271

Data breaches e-Discovery Ransomware Insurance 271

Security Affairs

SEPTEMBER 28, 2023

pic.twitter.com/I28yddzIqB — vx-underground (@vxunderground) September 27, 2023 The attack took place over the weekend and threat actors initially breached the systems at Asia offices, the ransomware also targeted the VMware ESXi servers. ” reads the 8-K form filed with SEC.

Ransomware 343

Ransomware Insurance Cybersecurity Encryption 343

Security Affairs

JUNE 2, 2023

In April, the non-profit health insurer Point32Health took systems offline in response to a ransomware attack that took place on April 17. The insurer immediately launched an investigation into the incident with the help of third-party cybersecurity experts to determine the extent of the incident. between June 2020 and present.

Ransomware 246

Ransomware Insurance Data breaches Cybersecurity 246

KnowBe4

MAY 21, 2024

New data covering cyber insurance claims through 2023 shows claims have increased while reaffirming what we already know: phishing and social engineering are the real problem.

Insurance 124

Insurance Phishing Ransomware Security 124

Security Affairs

SEPTEMBER 13, 2024

The investigation determined that the breach occurred on January 8, 2023. In March 2023, a lawsuit was filed. The healthcare network was the target a BlackCat ransomware attack, the security breach was discovered on February 6. The company immediately launched an investigation to determine the cause and scope of the incident.

Data breaches 307

Data breaches Ransomware Insurance Education 307

Security Affairs

FEBRUARY 28, 2024

The advisory updates to the FBI FLASH BlackCat/ALPHV Ransomware Indicators of Compromise released on April 19, 2022 and on December 19, 2023. “From mid-December 2023 onward, the healthcare sector has emerged as the most frequently targeted among the approximately 70 disclosed victims.” ” reads the joint advisory.

Ransomware 342

Ransomware Government Insurance Manufacturing 342

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4 Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 311

Artificial Intelligence Security Data breaches Ransomware 311

Hunton Privacy

MAY 4, 2022

In April 2022, two states enacted insurance data security legislation based on the National Association of Insurance Commissioners (“NAIC”) Insurance Data Security Model Law (MDL-668). Kentucky’s law goes into effect on January 1, 2023.

Insurance 110

Insurance Security Information Security Compliance 110

Security Affairs

JANUARY 19, 2024

In December 2023, VF Corp announced it was the victim of a ransomware attack and was forced to take some systems down to contain the threat. On December 13, 2023, VF Corp detected unauthorized access to a portion of its infrastructure. .” In 2015, the company controlled 55% of the U.S. million customers.

Data breaches 340

Data breaches Passwords Retail Insurance 340

Security Affairs

NOVEMBER 23, 2023

More specifically, on or about August 15, 2023, AutoZone determined that the exploitation of the vulnerability in the MOVEit application had resulted in the exfiltration of certain data. The Cl0p ransomware gang exploited the zero-day vulnerability CVE-2023-34362 to hack the platforms used by organizations worldwide and steal their data.

Data breaches 334

Data breaches Retail Education Ransomware 334

Security Affairs

DECEMBER 28, 2022

The chief executive of insurance giant Zurich warns that cyber attacks, rather than natural catastrophes, will become uninsurable. Mario Greco, chief executive of insurer giant Zurich, has warned that cyber attacks will become soon “uninsurable.”. What will become uninsurable is going to be cyber,” Mario Greco told the Financial Times.

Insurance 246

Insurance Risk Ransomware IT 246

Security Affairs

JANUARY 7, 2023

The gang states that the attack took place on December 3rd, 2022 and the attack was disclosed on January 6, 2023. employees info (social security numbers, emails, addresses, phone numbers, photos, insurances info, payments, etc.), The security breach was also confirmed by the victim in a notice published on its website.

Ransomware 246

Ransomware Insurance Data breaches Access 246

Security Affairs

OCTOBER 30, 2023

One of the most interesting aspects that emerged from the 2023 Hacker-Powered Security Report is the improvement of the patch management process, customers are getting faster at fixing vulnerabilities. The average platform-wide remediation time dropped 10 days in 2023.

Blockchain 342

Blockchain Risk Insurance Security 342

The Guardian Data Protection

NOVEMBER 11, 2023

Observer investigation reveals UK Biobank opened its biomedical database to insurance firms despite pledge it would not do so Sensitive health information donated for medical research by half a million UK citizens has been shared with insurance companies despite a pledge that it would not be. Continue reading.

Insurance 111

Insurance Data Privacy Privacy Risk 111