Cyberattack, Data Breach News, News
September 25, 2023
881 views 3 mins 0

Twin cyberattacks but different incident responses: Comparing MGM Resorts and Caesars

As an article in DarkReading highlights, it’s tempting to compare the incident responses by MGM Resorts and Caesars Entertainment to their recent cyberattacks because both are the same kind of entity and both were victims of the same threat actors (Scattered Spider/AlphV). But: Caesars quickly negotiated with the cyberattackers, and handed over a $15 million ransom payout, which […]

News, Education Sector, Legal News
September 21, 2023
1432 views 2 mins 0

College agrees to spend $3.5 million to improve cybersecurity to settle state claims of violations of state and federal laws

When New York State Attorney General Letitia James announced a settlement with Marymount Manhattan College stemming from a data breach in 2021, some people discussing the case online were surprised that a state could go after a non-profit college that way, and they wondered if the state could get that kind of settlement with a […]

Data Breach News, News
September 19, 2023
1271 views 33 secs 0

War crimes tribunal International Criminal Court says it has been hacked

Reuters reports:  The International Criminal Court (ICC) said on Tuesday its computer system had been hacked, a breach at one of the world’s most high-profile international institutions and one that handles highly sensitive information about war crimes. The ICC said it had detected unusual activity on its computer network at the end of last week, […]

Data Breach News, News
September 18, 2023
1253 views 3 mins 0

Analyst: MGM losing $4.2M-$8.4M a day because of cyberattack

MGM Resorts International could be losing between $4.2 million and $8.4 million in daily revenue and around $1 million in cash flow every day it’s under a cyberattack, a gaming industry analyst said in a Sunday report to investors. David Katz, an equity analyst with New York-based Jefferies Group, in a weekly report on gaming, […]

Data Breach News, News
September 12, 2023
1353 views 54 secs 0

Save the Children hit by BianLian extortionist gang

BianLian, previously known as a ransomware gang but more recently known for not bothering with encryption but just hacking and exfiltrating data, has reportedly attacked Save the Children, a well-known non-profit. While BianLian did not name the charity (they obfuscate their victims’ names while they are still hoping to get paid), their description of the […]

Healthcare, Legal News, News
September 11, 2023
1625 views 5 mins 0

L.A. Care Healthplan settles HHS OCR charges stemming from multiple violations for $1.3 million and corrective action plan

Today, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement of potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Rules with LA Care, the nation’s largest publicly operated health plan that provides health care benefits and coverage through state, federal, and commercial programs. OCR enforces the HIPAA […]

Data Breach News, News
September 11, 2023
2576 views 16 secs 0

Dissecting the MOVEit breach: Lessons learned from the ransomware attack

The MOVEit data breach, discussed in an earlier post, continues to make headlines. As SDX reports: Orchestrated by ransomware gang CL0P exploiting a zero-day vulnerability, it is now considered one of the largest hacks of 2023 — and potentially in recent history. To date, it is known to have impacted more than 1,150 organizations and nearly 56 million individuals, […]