Krebs on Security

OCTOBER 30, 2024

Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information. Image: Tamer Tuncay, Shutterstock.com. million individuals.

Insurance 212

Insurance Ransomware Data breaches Computer and Electronics 212

Security Affairs

APRIL 23, 2023

Non-profit health insurer Point32Health suffered a ransomware attack and has taken systems offline in response to the incident. Non-profit health insurer Point32Health has taken systems offline in response to a ransomware attack that took place on April 17. ” reads the statement published by the insurer.

Insurance 85

Insurance Ransomware Cybersecurity Education 85

IT Governance

OCTOBER 15, 2020

Cyber threats are so numerous that it’s impossible to prevent security incidents altogether. That’s why they organisations increasingly relying on cyber insurance policies to cover the costs when data breaches and cyber attacks occur. But just how helpful is cyber insurance? What is cyber insurance?

Insurance 119

Insurance Data breaches Risk Security 119

Data Matters

FEBRUARY 2, 2021

The National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law has been adopted in at least 11 states, with several others (including New York) having implemented either older or similar laws or administrative guidance. See State Legislative Brief, NAIC, June 2020.

Insurance 113

Insurance Security Compliance Privacy 113

Security Affairs

APRIL 22, 2022

When security fails, cyber insurance can become crucial for ensuring continuity. Our reliance on digital technology and the inherited risk is a key driving factor for buying cyber risk insurance. If the technology were to become unavailable, the resulting business impact could be mitigated with cyber insurance.

Insurance 87

Insurance Risk Cybersecurity Ransomware 87

Security Affairs

FEBRUARY 21, 2023

Recently emerged HardBit ransomware gang adjusts their demands so the insurance company would cover the ransom cost. For those who have cyber insurance against ransomware attacks. That way you would have avoided a leak and decrypted your information. Very important! reads the ransom note.

Insurance 86

Insurance Ransomware Encryption IT 86

Data Breach Today

JUNE 21, 2021

SEC: Executives Left in Dark About Vulnerability in File-Sharing System Title insurance company First American Financial Corp. Information security staff members were aware of the vulnerability in the company's EaglePro document-sharing system for five months but failed to fix it, the SEC reports.

Insurance 343

Insurance Data breaches Information Security Security 343

Security Affairs

JULY 9, 2021

Insurance giant CNA notifies customers of a data breach after the Phoenix CryptoLocker ransomware attack suffered in March. US insurance giant CNA is notifying customers of a data breach after the ransomware attack that it suffered in March. Bloomberg was informed about the payment by two people familiar with the attack.

Data breaches 144

Data breaches Insurance Ransomware Encryption 144

Security Affairs

APRIL 20, 2021

Car insurance provider Geico has suffered a data breach, attackers have stolen the driver’s licenses for policyholders for several weeks. Geico, the second-largest auto insurer in the U.S., We have reason to believe that this information could be used to fraudulently apply for unemployment benefits in your name.”

Insurance 133

Insurance Data breaches Sales Security 133

Security Affairs

SEPTEMBER 29, 2020

Gallagher (AJG) insurance giant disclosed a ransomware attack, the security breach took place on Saturday. Gallagher (AJG) global insurance brokerage firm confirmed that it was his with a ransomware attack on Saturday, September 26. US-based Arthur J. US-based Arthur J. “On September 26, 2020, Arthur J. The post Arthur J.

Insurance 142

Insurance Ransomware Data breaches Cybersecurity 142

Hunton Privacy

AUGUST 6, 2019

On August 2, 2019, New Hampshire Governor Chris Sununu signed into law SB 194 (the “Bill”), which requires insurers licensed in the state (“licensees”) to put in place data security programs and report cybersecurity events. Key provisions of the Bill include: Information Security Program. Incident Response Plan.

Insurance 81

Insurance Security Cybersecurity Information Security 81

Security Affairs

MAY 1, 2023

Bitmarck, one of the largest IT service providers for social insurance carriers in Germany, announced yesterday that it has suffered a cyber attack. The incident impacted statutory health insurance companies that have their IT operated by BITMARCK. The company immediately reported the incident to the responsible authorities.

IT 85

IT Insurance Data breaches Education 85

Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 66

Insurance Security Cybersecurity Data breaches 66

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July. Pierluigi Paganini.

Insurance 89

Insurance Data breaches Financial Services Passwords 89

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 66

Insurance Security Cybersecurity FOIA 66

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 77

Insurance Financial Services Cybersecurity Risk 77

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures.

Insurance 73

Insurance Data breaches Risk Information Security 73

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. Kentucky Governor Andy Beshear signed House Bill 474 into law, and Maryland Governor Larry Hogan signed SB 207.

Insurance 100

Insurance Security Cybersecurity Information Security 100

Krebs on Security

JUNE 18, 2021

Securities and Exchange Commission settled its investigation into the matter after the Fortune 500 company agreed to pay a paltry penalty of less than $500,000. The SEC says First American derives nearly 92 percent of its revenue from its title insurance segment, earning $7.1 This week, the U.S. First American Financial Corp.

Insurance 282

Insurance Risk Financial Services Mining 282

Security Affairs

MAY 19, 2024

According to the notice published by the company, WebTPA acts as an administrative services provider to certain benefit plans and insurance companies whose information was impacted in this incident. The investigation revealed that an unauthorized actor may have obtained personal information between April 18 and April 23, 2023. .

Data breaches 115

Data breaches Insurance Cybersecurity Security 115

The Security Ledger

AUGUST 20, 2019

We talk to Bruce McDonnell of the East West Institute about how insurers are responding. Related Stories Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware Podcast Episode 117: Insurance Industry Confronts Silent Cyber Risk, Converged Threats NotPetya Horror Story Highlights Need for Holistic Security.

Insurance 40

Insurance Risk Healthcare Manufacturing 40

eSecurity Planet

SEPTEMBER 21, 2024

Each of these regulations addresses different aspects of cybersecurity and data protection, making it essential for businesses and organizations to stay informed and proactive. This includes developing and maintaining security plans, conducting regular risk assessments, and ensuring continuous monitoring of information systems.

Cybersecurity 120

Cybersecurity Computer and Electronics Compliance Privacy 120

IT Governance

DECEMBER 14, 2021

With organisations’ cyber security requirements becoming more complex and the threat of cyber attacks growing each year, many decision-makers are turning towards cyber security as a service. This approach, also known as managed cyber security, works by outsourcing cyber security to a third party.

Security 129

Security Insurance Data breaches Information Security 129

Security Affairs

JANUARY 2, 2024

Hudson Researchers reported that on December 20th, a hacker using the moniker ‘irleaks’ announced the availability for sale of over 160,000,000 records allegedly stolen from 23 leading insurance companies in Iran. It is still unclear how the hackers targeted so many insurance companies at the same time.

Insurance 138

Insurance Sales Passwords Access 138

Security Affairs

JULY 2, 2024

The insurance company Prudential Financial confirmed that the data breach it suffered in February 2024 affected over 2.5 Prudential Financial confirmed that more than 2.5 million individuals were affected by the data breach it suffered in February 2024. million individuals.

Data breaches 124

Data breaches Insurance Ransomware Security 124

Hunton Privacy

NOVEMBER 8, 2023

The NYDFS, which regulates financial institutions including insurance companies, mortgage brokers and banks, adopted the original Cybersecurity Regulation in 2017. Our previous blog post covered key proposed changes to the Cyber Regulation.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Security Affairs

AUGUST 10, 2024

McLaren confirmed that hospitals had lost access to patient information databases, it also requested patients to bring detailed medication information, physician orders, and recent lab test results to their appointments. “On A INC Ransom ransomware attack this week disrupted IT and phone systems at McLaren Health Care hospitals.

Ransomware 115

Ransomware Insurance Data breaches Access 115

Security Affairs

FEBRUARY 26, 2023

Based on the investigation, News Corp understands that, between February 2020 and January 2022, an unauthorized party gained access to certain business documents and emails from a limited number of its personnel’s accounts in the affected system, some of which contained personal information.”

IT 92

IT Data breaches Insurance Cybersecurity 92

Security Affairs

SEPTEMBER 27, 2024

In a press statement, the Ministry said that systems have been restored to their backups including systems at Kuwait Cancer Control Center and administrative systems, like the health insurance and expatriate check-up systems.” According to the ministry, the healthcare systems were taken offline to secure them.

Insurance 102

Insurance Ransomware Government Security 102

Krebs on Security

APRIL 27, 2023

This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. But after being presented with a document including the Social Security number of a health professional in D.C. Washington, D.C.

Access 295

Access Information Security Authentication Communications 295

Security Affairs

FEBRUARY 3, 2024

” The company added that it did not record any insurance proceeds in the three and six months ending on December 31, 2023, associated with the cyberattack. The recognition of insurance recoveries, if applicable, may not align with the timing of recognizing the associated expenses.

Insurance 113

Insurance Sales Ransomware Marketing 113

Hunton Privacy

JANUARY 26, 2018

On January 25, 2018, the Standardization Administration of China published the full text of the Information Security Technology – Personal Information Security Specification (the “Specification”). The Specification divides personal information into two categories: personal information and sensitive personal information.

Information Security 48

Information Security Security Privacy Personal data 48

Security Affairs

APRIL 8, 2024

Compromised data exposed personal and Medicare information of the individuals, including name, date of birth, address, Medicare Health Insurance Claim Number (which contains a Social Security number associated with a member) and some medical information and/or health insurance information.

Data breaches 118

Data breaches Insurance Cybersecurity Government 118

Security Affairs

OCTOBER 18, 2024

Omni Family Health is notifying nearly 470,000 individuals that their personal information was compromised in a data breach resulting from a cyberattack that occurred earlier this year. The organization discovered the security breach on August 7, 2024, following claims that information was taken from its systems and leaked on the dark web.

Data breaches 113

Data breaches Insurance Cybersecurity Ransomware 113

IG Guru

OCTOBER 11, 2019

Insurance broker Marsh has unveiled the inaugural class of cybersecurity products and services receiving a Cyber Catalyst designation that is part of an evaluation program its backers hope will bring greater clarity in the crowded cybersecurity marketplace.

Insurance 40

Insurance Cybersecurity IT Information governance 40