The Last Watchdog

JULY 30, 2018

One sliver of the $90 billion, or so, companies are expected to spend this year on cybersecurity products and services is an estimated $85 million they will shell out for encrypted flash drives. We discussed why encrypted flash drives have become established as a must-have portable business tool in the digital age. Park: Exactly.

Encryption 203

Encryption Military Passwords Authentication 203

Thales Cloud Protection & Licensing

JULY 4, 2022

How Cybersecurity Insurance Can Work To Help An Organization. In the last 20+ years, cybersecurity insurance has added risk transference to the available palette of palliative choices. I recently spoke with Neira Jones and Danna Bethlehem about how cybersecurity insurance can work to help an organization. regulations.

Insurance 71

Insurance Cybersecurity Ransomware Cleanup 71

Security Affairs

NOVEMBER 18, 2024

The healthcare center discovered that a threat actor accessed and encrypted files on their systems between September 5, 2024 and September 8, 2024. This investigation showed that an unknown person accessed and encrypted files on our systems between September 5, 2024 and September 8, 2024.”

Ransomware 124

Ransomware Encryption Insurance Personal data 124

Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”. O.R.C. §§ 3965.01(E).

Insurance 66

Insurance Security Cybersecurity Data breaches 66

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 66

Insurance Security Cybersecurity FOIA 66

Hunton Privacy

JANUARY 2, 2019

New cybersecurity rules for insurance companies licensed in South Carolina are set to take effect in part on January 1, 2019. The new law is the first in the United States to be enacted based on the data security model law drafted by the National Association of Insurance Commissioners.

Insurance 77

Insurance Cybersecurity Data breaches Encryption 77

eSecurity Planet

OCTOBER 18, 2022

However, even with the best planning, organizations can find a few users, machines, or systems that were overlooked or whose backup may be corrupted or encrypted. First, call the cyber insurance company that issued the organization’s cybersecurity policy. Insured companies often will not have options. Eliminate attacker access.

Ransomware 145

Ransomware Encryption Insurance Access 145

Thales Cloud Protection & Licensing

APRIL 1, 2021

Protecting Sensitive Data with Luna Key Broker for Microsoft Double Key Encryption. Thales has integrated its Luna HSMs with DKE for Microsoft 365, which work together to enable organizations to protect their most sensitive data while maintaining full control of their encryption keys. Thu, 04/01/2021 - 14:04.

Encryption 79

Encryption Compliance Cloud GDPR 79

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B. See CT Gen Stat § 38a-999b (2015) ; 23 NYCRR 500.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

Data Protection Report

FEBRUARY 27, 2020

Given the level of interest in the case, we have prepared a deeper-dive into the facts and the implications of the decision, with a focus on the important role played in the case by cyber insurance. Until recently, there had not been an example of a cyber insurer actively participating in a recovery action. This is set out below.

Insurance 81

Insurance Risk Data breaches Personal data 81

Krebs on Security

AUGUST 29, 2019

-based PerCSoft is a cloud management provider for Digital Dental Record (DDR), which operates an online data backup service called DDS Safe that archives medical records, charts, insurance documents and other personal information for various dental offices across the United States. PercSoft did not respond to requests for comment.

Ransomware 229

Ransomware Insurance Encryption Cloud 229

Security Affairs

AUGUST 14, 2024

The attackers gained access to patients’ names, dates of birth, Social Security numbers, driver’s licenses or government-issued identification numbers, medical record numbers, medical treatment and condition information, medical diagnoses, medication information, and health insurance information.

Data breaches 130

Data breaches Encryption Ransomware Insurance 130

Security Affairs

JANUARY 2, 2024

A team of researchers released a suite of tools that could help victims to decrypt data encrypted with by the Black Basta ransomware. Independent security research and consulting team SRLabs discovered a vulnerability in Black Basta ransomware’s encryption algorithm and exploited it to create a free decryptor.

Ransomware 136

Ransomware Encryption Blockchain Insurance 136

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures. Document an incident response plan.

Insurance 73

Insurance Data breaches Risk Information Security 73

Security Affairs

JANUARY 23, 2024

In early January, independent security research and consulting team SRLabs discovered a vulnerability in Black Basta ransomware’s encryption algorithm and exploited it to create a free decryptor. The ransomware employs encryption based on a ChaCha keystream, which is utilized to perform XOR operations on 64-byte-long chunks of the file.

Encryption 143

Encryption Ransomware Blockchain Insurance 143

Krebs on Security

JULY 19, 2021

Experts say the biggest reason ransomware targets and/or their insurance providers still pay when they already have reliable backups is that nobody at the victim organization bothered to test in advance how long this data restoration process might take. “That is still somewhat rare,” Wosar said.

Ransomware 358

Ransomware Encryption Insurance Cybersecurity 358

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. Kentucky Governor Andy Beshear signed House Bill 474 into law, and Maryland Governor Larry Hogan signed SB 207.

Insurance 100

Insurance Security Cybersecurity Information Security 100

Thales Cloud Protection & Licensing

OCTOBER 24, 2024

The cybersecurity regulations apply to entities overseen by the NYDFS, such as financial institutions, insurance companies, agents, and brokers, as well as banks, trusts, mortgage lenders and brokers, money transmitters, check cashers, and other related businesses.

Cybersecurity 62

Cybersecurity Financial Services Encryption Compliance 62

Krebs on Security

DECEMBER 7, 2019

The attack on CTS comes little more than two months after Sodinokibi hit Wisconsin-based dental IT provider PerCSoft , an intrusion that encrypted files for approximately 400 dental practices. “I would recommend everyone reach out to their insurance provider,” said one dentist based in Denver.

Ransomware 235

Ransomware IT Insurance Encryption 235

Thales Cloud Protection & Licensing

APRIL 5, 2018

Key Findings from the 2018 Global Encryption Trends Study. No core technologies are more fundamental to data protection than encryption and key management. We’ve just released the results from our Global Encryption Trends Study which once again show positive growth in the use of encryption across a wide variety of use cases.

Encryption 48

Encryption Cloud IoT e-Discovery 48

Krebs on Security

DECEMBER 8, 2022

First spotted in mid-August 2022 , Venus is known for hacking into victims’ publicly-exposed Remote Desktop services to encrypt Windows devices. Encrypting sensitive data wherever possible. Department of Health and Human Services (HHS) warned that Venus ransomware attacks were targeting a number of U.S. healthcare organizations.

Ransomware 291

Ransomware Metadata Insurance Encryption 291

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. In addition to the monetary penalty of $5 million, NYDFS also accepted Carnival’s surrender of its insurance producer license; thus, Carnival has ceased selling insurance in New York.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

IT Governance

FEBRUARY 5, 2018

Increased interest in cyber insurance. With more than 800 million records being leaked in 2017 ( find out more in our Breaches and Hacks Blog Archive ), it’s not surprising that cyber insurance business has increased in recent months. Insurers assess an organisation’s cyber risk to set premium levels.

Insurance 55

Insurance Risk Government GDPR 55

The Security Ledger

OCTOBER 23, 2018

In this episode of the podcast (#117), we go deep on one of the hottest sectors around: cyber insurance. In the first segment, we talk with Thomas Harvey of the firm RMS about the problem of “silent cyber” risk to insurers and how better modeling of cyber incidents is helping to address that threat. Read the whole entry. »

Insurance 40

Insurance Risk Digital transformation Ransomware 40

eSecurity Planet

MAY 26, 2023

Confidential computing is a technology and technique that encrypts and stores an organization’s most sensitive data in a secure portion of a computer’s processor — known as the Trusted Execution Environment (TEE) — while it’s processed and in use. Most other encryption approaches protect data at rest and data in transit only.

Encryption 98

Encryption Cloud IoT Blockchain 98

Krebs on Security

AUGUST 6, 2020

A group of thieves thought to be responsible for collecting millions in fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts gathered personal data on people and businesses they were impersonating by leveraging several compromised accounts at a little-known U.S.

Insurance 350

Insurance Communications Authentication Access 350

KnowBe4

JULY 5, 2024

Boomer uses orchestrated, dynamic phishing sites, cookies, server-side logic, bot-detection countermeasures, encrypted code, and other techniques to increase the attack's reach and stealth.” The breadth and depth of these breaches signal an alarming escalation in cyber warfare.”

Phishing 95

Phishing Insurance Manufacturing Government 95

Security Affairs

APRIL 10, 2024

The Group Health Cooperative of South Central Wisconsin (GHC-SCW) is a non-profit organization that provides health insurance and medical care services to its members in the Madison metropolitan area of Wisconsin. “The attacker attempted to encrypt GHC-SCW’s system but was unsuccessful.”

Data breaches 136

Data breaches e-Discovery Ransomware Insurance 136

Security Affairs

JUNE 14, 2024

In January 2025, European financial and insurance institutions, their business partners and providers, must comply with DORA. In January 2025, financial and insurance institutions in Europe and any organizations that do business with them must comply with the Digital Operation Resilience Act, also known as DORA.

Compliance 125

Compliance Insurance Risk Cloud 125

Security Affairs

OCTOBER 20, 2024

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

Security 118

Security Data breaches Ransomware Cybersecurity 118

eSecurity Planet

AUGUST 20, 2024

They often include insurance and recovery assistance if your identity is compromised. Use Encryption Encryption ensures that your data is unreadable to anyone who doesn’t have the decryption key. Use encrypted messaging apps like Signal or WhatsApp for private communications. BitLocker for Windows and FileVault for Mac).

Data breaches 130

Data breaches Passwords Encryption Authentication 130

Thales Cloud Protection & Licensing

MAY 9, 2022

While implementation of security technologies such as multi-factor authentication and encryption have slightly increased, we have not yet reached the level where the majority of applications, data and operational technology are fully protected. Cyber insurance coverage ramps up. Encrypt sensitive data at rest, in motion and in use.

Insurance 71

Insurance Ransomware Encryption Authentication 71

Thales Cloud Protection & Licensing

NOVEMBER 9, 2021

Shared responsibility is about controlling your own security – anything from data encryption to managing the encryption keys. Having full control and access to the encryption keys places more trust and confidence on leveraging the powers of the cloud. This is exactly why organizations like Thales and Google are working together.

Cloud 123

Cloud Security Encryption Insurance 123

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Security Affairs

MAY 15, 2023

Compromised organizations operate in different business verticals, including manufacturing, wealth management, insurance providers, and pharmaceuticals. The ransomware supports intermittent encryption to speed up the encryption process. This process encrypts only a certain part of the source file’s contents, not the entire file.”

Ransomware 98

Ransomware Encryption Healthcare Insurance 98

eSecurity Planet

SEPTEMBER 21, 2024

Health Insurance Portability & Accountability Act (HIPAA) The Health Insurance Portability and Accountability Act (HIPAA) sets standards for protecting sensitive health information, particularly electronic health records (EHRs). This includes administrative, physical, and technical safeguards like encryption and access controls.

Cybersecurity 120

Cybersecurity Computer and Electronics Compliance Privacy 120