LATEST POST
Boston Scientific provides update on recent cyberattack
On August 25, Boston Scientific discovered a cybersecurity incident was affecting some information technology systems, resulting in a network outage and disruption to the medical device firm’s operations. The incident impacted access to certain operating systems and business applications, including the ability to process and ship customer orders. Since then, the firm has provided daily […]
Australian cops cuff alleged TeamPCP mastermind
“TeamPCP” has been arrested in Australia. The leader’s arrest had been widely anticipated across online channels and discussions, and the leader had even said he expected to be arrested and might just turn himself in. Now The Register reports: The Australian city of Perth is by some measures the world’s most isolated major metropolis, but […]
ShinyHunters claims McKesson data breach exposing 284 million patient records
CyberInsider reports that ShinyHunters claims to have hit a major healthcare software provider, and that hundreds of millions of records have been acquired, although the number of unique patients is not yet determined. McKesson has acknowledged that it is investigating the claims. Read more at CyberInsider.
Carhartt data breach affects 12.9M, half of what ShinyHunters claimed
The Register reports: Workwear and fashion retailer Carhartt’s data breach was about half as bad as ShinyHunters claimed, according to Troy Hunt, who reviewed the data dump before uploading it to his Have I Been Pwned website. Hunt’s HIBP service reported 12.9 million individuals affected by the alleged breach, around half of what ShinyHunters purported […]
‘Close Enough’ Data Breach Notifications Create Exposure
A reminder that the details of states’ data breach notification laws really do matter. A notification that may be satisfactory in most states may be noncompliant in another state and really cost the firm. From attorneys at BakerHostetler: One ruling is not a trend. And there can be unique factors at play in regulatory investigations […]
MCNA Data Breach Settlement Is Offering Up to $2,500 Payouts and Two Years of Monitoring for Millions
The Daily Hodl reports: A proposed class action settlement is offering cash payments and monitoring services to millions affected by a data breach at a health care company. The agreement stems from the Crowe v. Managed Care of North America (MCNA) class action lawsuit filed in the U.S. District Court for the Southern District of […]
“Cognizable damage” required for data breach claims, MA appeals court says in a first
There has been another ruling that makes it harder for plaintiffs in data breach litigation to prove standing. As seen on JDSupra: Helpful guidance for businesses, and for Massachusetts state courts. In 2021, the U.S. Supreme Court held in TransUnion, LLC v. Ramirez that in a suit for damages, “the mere risk of future harm, without more, cannot […]
Fizzle: ShinyHunters’ claimed attack on ReliaQuest went nowhere: ReliaQuest
DataBreaches.net reports: Read ReliaQuest’s blog post.