News, Legal News
November 17, 2023
1064 views 3 mins 0

Morgan Stanley agrees to pay $6.5 million to settle charges by six states over two data security incidents

TALLAHASSEE, Fla.—Attorney General Ashley Moody, along with five other attorneys general, secured a $6.5 million agreement with Morgan Stanley Smith Barney LLC, also known as Morgan Stanley. The action comes after an investigation found that Morgan Stanley compromised the personal information of its customers due to negligent internal data-security practices. Morgan Stanley potentially exposed millions […]

Legal News, Malware Ransomware, News
November 16, 2023
564 views 3 mins 0

A ransomware gang files an SEC complaint against its victim for not reporting the breach to the SEC within 4 days

“They did WHAT??” Ransomware gangs will often test ways to pressure victims to pay. But today, threat actors associated with the AlphV (BlackCat) group tested a new approach that is raising eyebrows in the cybersecurity community. When a victim, MeridianLink, didn’t pay them quickly and didn’t even start to negotiate any payment with them, AlphV […]

Legal News, News
November 09, 2023
930 views 12 secs 0

NYDFS Amends Cybersecurity Regulation; Some Provisions Go Into Effect December 1

New York State continues to strengthen cybersecurity regulations for financial institutions. New amendments to the Cybersecurity Regulation enacted in 2017 strengthen the regulation and add new security obligations. As Hunton Andrews Kurth summarizes it, “The new amendments strengthen the initial framework and require NYDFS-regulated entities to adhere to a number of additional prescriptive data security […]

News, Commentaries and Analyses, Legal News, Malware Ransomware
November 02, 2023
1209 views 9 mins 0

International Counter Ransomware Initiative 2023 Joint Statement

Released by the White House, November 2, 2023 The 50 members of the International Counter Ransomware Initiative (CRI)—Albania, Australia, Austria, Belgium, Brazil, Bulgaria, Canada, Colombia, Costa Rica, Croatia, the Czech Republic, the Dominican Republic, Egypt, Estonia, the European Union, France, Germany, Greece, India, INTERPOL, Ireland, Israel, Italy, Japan, Jordan, Kenya, Lithuania, Mexico, the Netherlands, New […]

Finance, Legal News, News
November 02, 2023
1023 views 14 secs 0

NY Financial Regulator Rolls Out Updated Cybersecurity Standards

Bloomberg reports: New York regulators assigned heightened cybersecurity requirements to banks, insurers, and financial services providers based in the state with the release of finalized rule amendments Wednesday. Covered entities will have to use multifactor authentication, expand cybersecurity governance duties, and conduct consistent threat testing under the regulation updated by the New York Department of Financial Services. […]

Legal News, Healthcare, Malware Ransomware
October 31, 2023
1946 views 8 mins 0

HHS settles its first ransomware investigation case: Doctors’ Management Services

Today, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement under the Health Insurance Portability and Accountability Act (HIPAA) with Doctors’ Management Services, a Massachusetts medical management company that provides a variety of services, including medical billing and payor credentialing. The HIPAA Privacy, Security, and Breach Notification […]

Legal News
October 31, 2023
446 views 17 secs 0

OCR Releases Cybersecurity Video: How the HIPAA Security Rule Can Help Defend Against Cyber-Attacks

From HHS OCR: In recognition of National Cybersecurity Awareness Month, OCR has produced a new video this October for organizations covered under the HIPAA Rules on how the HIPAA Security Rule can help regulated entities defend against cyber-attacks. The video is available in English and Spanish. This presentation is intended to educate the health care […]

Legal News
October 31, 2023
909 views 36 secs 0

Colorado GOP Wants Inquiry into Delayed Notification of Data Breach

GovTech reports: Colorado House Republican leaders on Monday called for an investigation into why Colorado’s higher education agency allegedly failed to timely report a massive data breach this summer. In a two-page letter hand-delivered to Gov. Jared Polis and Attorney General Phil Weiser, five state representatives also urged an inquiry into why thousands potentially affected […]

Legal News, Malware Ransomware, News
October 31, 2023
892 views 50 secs 0

The U.S. And Its Allies Are Pledging Never To Pay Hacker Ransoms

An outstretched hand with the word "NO!"

Eric Geller reports: The Biden administration and dozens of foreign allies will pledge this week never to pay ransoms to hackers who lock up their national governments’ computer systems, hoping to discourage financially motivated cyber criminals from seeing those systems as attractive ransomware targets. The joint promise will occur as part of the third annual […]

News, Legal News
October 27, 2023
1058 views 2 mins 0

FTC announces new Safeguards Rule provision: Is your company up on what’s required?

Federal Trade Commission

October 2023 marks the 20th anniversary of the effective date of the Gramm-Leach-Bliley Safeguards Rule. Its purpose then – and its purpose now – is to protect consumers by requiring entities covered by the Rule to “develop, implement, and maintain reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of customer […]