LATEST POST
Data Breach Notification Laws
One, in the absence of any specific law or regulation the person who was hacked is not required to notify anyone, including the people whose information was accessed, that their information was compromised. That is why access to the below specific notification requirements is critically important. Two, if there is a requirement to notify people […]
Vendors to be(a)ware of: United Lex
UnitedLex performs data breach reviews for several “vertically integrated” solutions, including Charles River Associates. In 2022 UnitedLex paid, others on their behalf paid and/or they waived claims they were to be paid a total amount of approximately $30,000,000 to settle a fraud suit. The relevant news of the settlement, without mention of the waived claims […]
Etiology of a Breach
Most data breaches involve some level of victim human error, which theoretically employee training can address. Human error can take the form of clicking on a link, where the email address of the sender is unknown to the person clicking on the link. Malware then enters the scene. Another common human error scenario involves phishing […]