Hunton Privacy

MARCH 17, 2023

Controller Obligations Controllers would be required to implement reasonable security practices, provide a compliant privacy notice to consumers and enter into agreements with processors that handle the controller’s personal data. These rights notably exclude a right to correct inaccurate personal data.

Privacy 72

Privacy Personal data Sales Insurance 72

Security Affairs

SEPTEMBER 13, 2024

The network also includes a children’s hospital, rehabilitation centers, and partnerships with academic institutions to support medical education and research. ” The investigation revealed that the ransomware gang had access to the personal data of at least 134,000 individuals, including cancer patients.

Data breaches 96

Data breaches Ransomware Insurance Education 96

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Compromised information includes patients’ personal data, health and medical records, financial data, internal emails and software source code. Data breached: 5 TB.

Data Privacy 89

Data Privacy Energy and Utilities Privacy Manufacturing 89

DLA Piper Privacy Matters

APRIL 8, 2019

This fragmentation has, unsurprisingly, lead to a heavy administrative burden for the secondary users of social and health care data by parallel and slow licence procedures with various authorities. The decisions on licenses are subject to an appeal.

Personal data 68

Personal data GDPR Healthcare Compliance 68

IT Governance

JANUARY 23, 2024

Source (New) Real estate USA Yes 46,906 Hampton-Newport News Community Services Board Source 1 ; source 2 ; source 3 (New) Healthcare USA Yes 44,312 Air Methods Source 1 ; source 2 (New) Healthcare USA Yes 34,016 GREYHOURS Source (New) Retail France Yes 18,700 Groveport Madison Schools Source 1 ; source 2 ; source 3 (Update) Education USA Yes 15.5

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

Security Affairs

NOVEMBER 23, 2023

The platform aims to personalize and optimize health programs for individuals, employers, health plans, and other organizations. The company disclosed a data breach that exposed the personal data of nearly 8.5 million Teachers Insurance and Annuity Association of America 2.6 million Genworth 2.5 million PH Tech 1.7

Data breaches 102

Data breaches Insurance Ransomware Education 102

IT Governance

JUNE 1, 2023

The owner of the website where the data was posted has been arrested by the FBI, the website was shut down and the investigation is ongoing. MCNA Insurance MCNA Insurance, also known as MCNA Dental, was caught up in a cyber hacking incident last week, in which 112 covered entities were affected. million people.

Data breaches 118

Data breaches Insurance Personal data Ransomware 118

Data Protection Report

JANUARY 30, 2023

3. Does an insurance policy that covers direct physical loss or damage to media cover the situation where ransomware renders downloaded software useless because it could not be decrypted? Which one is NOT on the list?

Privacy 115

Privacy Cybersecurity Personal data Insurance 115

IT Governance

DECEMBER 19, 2023

An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November. Data breached: personal data belonging to 14,690,284 individuals.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Security Affairs

FEBRUARY 26, 2021

Our online security team has uncovered a massive data breach originating from a misconfigured Amazon Bucket, which was operated by a Turkish Legal advising company, INOVA YÖNETIM & AKTÜERYAL DANI?MANLIK. Inova is an actuarial consultancy company, which means they compile statistical analysis and calculate insurance risks and premiums.

Data breaches 104

Data breaches Insurance Paper Access 104

IT Governance

OCTOBER 24, 2023

Records breached: Unknown, but sensitive personal data was probably breached. BHI Energy Announces Data Breach Affecting Confidential Information of 91k Individuals Date of breach: 29 June 2023 (filed notice with the Attorney General of Maine on 18 October 2023). It’s unclear whether personal data has been breached.

Data Privacy 96

Data Privacy Privacy Security Data breaches 96

Data Matters

JUNE 22, 2022

Carves out personal data processed solely for payments from definition of persons subject to the law – Persons subject to the law are defined with reference to the volume of data processed about Connecticut residents, as we have seen in other laws. Data in Scope – The Majority Approach.

Data Privacy 86

Data Privacy Privacy Personal data Sales 86

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Uniform Personal Data Protection Act.

Data breaches 86

Data breaches Privacy Personal data Data Privacy 86

Security Affairs

APRIL 20, 2023

If malicious actors accessed the exposed data, the company could have faced devastating consequences and put their clients at risk, as financial services are the main target for cybercriminals. ICICI Bank’s response Threat to financial accounts Finance and insurance are one of the most targeted industries by cybercriminals.

Personal data 97

Personal data Phishing Risk Communications 97

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. 9) deidentified data (that meets the requirements for deidentification under the law).

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.

Data Privacy 70

Data Privacy Privacy Security Data breaches 70

IT Governance

MAY 30, 2019

which breached sixteen years’ worth of insurance data. Sunderland City Council launches investigation after library users’ personal data hacked (45). Graphic design firm Canva hit by massive data breach (139 million). Hackers breach the Philippines United Student Financial System for Tertiary Education (unknown).

Data breaches 111

Data breaches Personal data Ransomware Phishing 111

IT Governance

DECEMBER 1, 2022

Personal Paraguay telecom victim of cyber attack (unknown). Brazilian health insurance firm Fisco Saúde hit by cyber attack (unknown). Personal data of Kannur University students leaked from official website (30,000). Australia’s Xavier College says stolen student data might be released after hack (100).

Data breaches 114

Data breaches Ransomware Personal data Insurance 114

IT Governance

MAY 7, 2024

A further 381,000 New York City public school students affected by 2022 data breach In January 2022 , personal data from around 820,000 New York City public school students, both current and former, was breached. Data breached: 1,201,000 people’s data. Organisation(s) Sector Location Data breached?

Data breaches 59

Data breaches Education Manufacturing Retail 59

IT Governance

JUNE 1, 2022

NB65 hackers reportedly stole credit card data of QIWI clients (unknown) Fei protocol suffers an extensive security breach (unknown) South Australian public servants now involved in payroll data breach (13,088) The Calcasieu Parish School Board has been the victim of a cyber fraud incident (unknown).

Data breaches 126

Data breaches Ransomware Phishing Education 126

IT Governance

NOVEMBER 7, 2022

Welcome to our November 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Elsewhere, we assess data breaches at a cancer research facility and the US retailer Bed Bath & Beyond.

Phishing 115

Phishing Retail Data breaches Insurance 115

IT Governance

MARCH 2, 2020

Preschool services provider Educational Enrichment Systems discloses cyber attack (unknown). Pacific Specialty Insurance Company notifies plan members of 2019 data breach (unknown). Rady’s Children Hospital in San Diego notifying patients whose data was accessed via open port on the Internet (unknown).

Data breaches 142

Data breaches Ransomware Phishing Personal data 142

IT Governance

JANUARY 9, 2024

million people was compromised, including names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. Data breached: 4,452,782 records. 79 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 58

Data Privacy Privacy Data breaches Manufacturing 58

IT Governance

JANUARY 30, 2024

Data breached: 2 PB. Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 750 million victims’ personal data.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

Hunton Privacy

DECEMBER 3, 2018

On November 29, 2018, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data to manage (1) business activities and (2) unpaid invoices. . Background.

GDPR 81

GDPR Personal data Insurance Education 81

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Data breached: >33,000,000 people’s data. Compromised information varies from person to person.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Security Affairs

APRIL 30, 2023

ViperSoftX uses more sophisticated encryption and anti-analysis techniques Atomic macOS Stealer is advertised on Telegram for $1,000 per month CISA warns of a critical flaw affecting Illumina medical devices OpenAI reinstates ChatGPT service in Italy after meeting Garante Privacy’s demands Cisco discloses a bug in the Prime Collaboration Deployment (..)

Security 91

Security Ransomware Cybersecurity Authentication 91

IT Governance

SEPTEMBER 1, 2021

Data breaches. Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Travel and medical insurance provider guard.me Cyber attacks. Ransomware. Financial information. Malicious insiders and miscellaneous incidents. In other news…. Cyber attacks.

Data breaches 140

Data breaches Ransomware Insurance Data migration 140

eSecurity Planet

AUGUST 9, 2022

The GDPR provision that may keep IT security teams busiest is Article 32, which requires “a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing” of personal data. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

IT Governance

JANUARY 11, 2018

Neil Hare-Brown of Cyber|Decider said that, in the last few months, he had investigated incidents at six private schools where insurance claims had been filed. Phishing scams are common within the education sector in general because of the amount of personal data that they store.

Phishing 58

Phishing Insurance Education Personal data 58

IT Governance

FEBRUARY 23, 2018

The finance and insurance (79%), information or communications (67%) and education (52%) sectors have the highest awareness of the GDPR. The finance and insurance sector is also the most likely to have put in place measures to comply with the GDPR, with 54% having done so.

GDPR 50

GDPR Compliance Insurance Personal data 50

DLA Piper Privacy Matters

OCTOBER 25, 2022

The ICO found that Interserve had failed to put appropriate technical and organisational measures in place to secure personal data (in contravention of Articles 5(1)(f) and 32 GDPR) for a period of ~20 months. On 24 October 2022, the ICO issued a penalty notice (MPN) to Interserve Group Limited (Interserve), imposing a fine of £4.4m

Security 52

Security GDPR Personal data Insurance 52

Data Matters

SEPTEMBER 24, 2019

The GDPR was designed to harmonize data protection laws across Europe and to protect EU residents’ data privacy rights; and, its coming triggered significant privacy and data protection compliance activities amongst organizations doing business in the EU and working with the personal data of EU residents.

Personal data 66

Personal data GDPR Data Privacy Privacy 66

IT Governance

MAY 2, 2023

Shields Health Care Group The largest data breach of April 2023 was at the Shields Health Care Group, a Massachusetts-based medical services provider. Reports emerged near the end of the month that a cyber criminal had gained unauthorised access to the organisation’s systems and had stolen the personal data of 2.3

Data breaches 102

Data breaches Ransomware Personal data Access 102

IT Governance

JULY 5, 2022

Welcome to our July 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over their personal data. It added: “We are working with local law enforcement, GEMA, GBI, and insurance officials to recover the funds.

Phishing 115

Phishing e-Delivery Retail Insurance 115

IT Governance

FEBRUARY 8, 2018

Of the businesses surveyed, those in the finance and insurance industries had the highest levels of awareness (79%), followed by information and communications (67%) and education (52%). And as these figures show many organisations still need to act to make sure the personal data they hold is secure.

GDPR 50

GDPR Government Education Compliance 50