It’s always risky to quickly claim that there’s no evidence that customer data has been compromised in a data breach incident because you may find out later that it has been. While MoneyGram confirmed a breach weeks ago, they were careful not to make any claims about whether customer data was impacted. Now there’s an […]
A new regulation related to cybersecurity program requirements for all New York general hospitals licensed under Article 28 of the Public Health Law (PHL) took effect on October 2, 2024. All general hospitals covered by the regulation must comply with the new provisions within one year of the adoption date, except that general hospitals must […]
Brian Montgomery is a partner at Pillsbury and a former NYDFS deputy superintendent. Mark Krotoski is a partner at Pillsbury and former national coordinator for the Computer Hacking and Intellectual Property Program at the Department of Justice. In an article on Bloomberg Law, they write: Cybersecurity regulations can be a constantly moving target, with digital advances and […]
The Record reports: None of the water or wastewater facilities run by the American Water Works company were affected by a cyberattack that began last week, according to a statement released on Monday. The company, which supplies water to millions of Americans, filed documents with the Securities and Exchange Commission (SEC) on Monday notifying the public of […]
Bleeping Computer reports: Comcast Cable Communications and Truist Bank have disclosed they were impacted by a data breach at FBCS, and are now informing their respective customers that their data has been compromised. […] According to a notice submitted to the Maine authorities, 273,703 Comcast customers were impacted by the breach. “FBCS’s investigation discovered that files downloaded […]
A recent press release from the Dutch DPA (Autoriteit Persoonsgegevens) emphasizes that Dutch organizations need to do better in providing breach victims with timely information that they need to protect themselves. If the Dutch DPA thinks warnings or alerts sent to victims more than three weeks after a breach is “way too slow,” The Data […]
Datatilsynet is Norway’s Data Protection Authority. Inspection of its website indicates that it has not imposed many monetary penalties in recent years for violations of the Personal Data Act 2000. After 2021, in which it reported 37 actions, it issued only 12 reports in 2023, and only 7 so far in 2024. Here are two […]
Reuters reports that Chinese hackers accessed the networks of U.S. broadband providers and obtained information from systems that the federal government uses for court-authorized wiretapping. The Wall Street Journal first reported the story on Saturday. Verizon Communications, AT&T, and Lumen Technologies are among the telecoms companies whose networks were breached by the recently discovered intrusion, […]
Operation Cronos revealed more arrests, sanctions, and disruption of the LockBit ransomware operation. Help Net Security reports: The third phase of Operation Cronos, which involved officers from the UK National Crime Agency (NCA), the FBI, Europol and other law enforcement agencies, has resulted in the arrest of four persons for allegedly participating in the LockBit […]
The Associated Press reports: A hacking group tied to Russian intelligence tried to worm its way into the systems of dozens of Western think tanks, journalists and former military and intelligence officials, Microsoft and U.S. authorities said Thursday. The group, known as Star Blizzard to cyberespionage experts, targeted its victims with emails that appeared to […]
