Schneier on Security

DECEMBER 19, 2018

The US House of Representatives Committee on Oversight and Government Reform has just released a comprehensive report on the 2017 Equifax hack. Here is my testimony before before the House Subcommittee on Digital Commerce and Consumer Protection last November. Lance Spitzner also commented on this.

Data breaches

Malwarebytes

MARCH 16, 2022

The US Federal Trade Commission (FTC) has announced that it took action against online customized merchandise platform CafePress over allegations that it failed to secure consumers’ sensitive personal data and covered up a major breach. CafePress has already settled with seven US states as a result of this data breach.

Data breaches

eSecurity Planet

SEPTEMBER 21, 2024

The landscape of cybersecurity laws and regulations today is set to undergo significant changes, impacting businesses, government entities, and individuals alike. HIPAA also requires organizations to conduct regular risk assessments and report data breaches. What are Federal Cybersecurity Regulations?

Cybersecurity

eSecurity Planet

AUGUST 9, 2022

GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. See the Top Governance, Risk and Compliance (GRC) Tools. Health data and patient data in the U.S. Financial Data Protection Laws. In the U.S.,

Data privacy

Thales Cloud Protection & Licensing

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. These large subscriber bases in turn generate massive data volumes.

Encryption

Privacy and Cybersecurity Law

APRIL 28, 2017

On April 4, 2017, Tennessee Governor Bill Haslam signed into law an amendment to the state’s data breach notification law, making two […].

Data breaches

SC Magazine

FEBRUARY 10, 2021

Government agencies don’t make endorsements necessarily but they’re identifying security ratings as a cyber risk metric. CISA focuses on critical infrastructure, which includes a number of sectors such as health care and energy and transportation and includes the government. A rating is more than just a number.

Cyber Insurance

Thales Cloud Protection & Licensing

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail

SiteLock

AUGUST 27, 2021

US to Raise Breach of Government Records at Talks with China. This Monday, The United States began the annual security talks with China and an official said that the US government representative would raise directly the major data breach at OPM during the discussion.

Cybersecurity

SecureWorld News

MARCH 18, 2021

According to a statement from DelBene, 70% of Americans believe their data is less secure now than it was five years ago, and 45% say they had their personal information compromised in a data breach with limited to no accountability for those responsible.

Data privacy

Privacy and Cybersecurity Law

MAY 19, 2017

On May 15, 2017, the US Government Accountability Office (GAO) released a new report entitled “Internet of Things: Status and implications of an […].

Internet

Security Boulevard

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail

SiteLock

AUGUST 27, 2021

It’s a heartwarming tale of multiple mass data compromises, which affected yours truly. We’ll also discuss how major data breaches occur, and what you can do to protect yourself in the Age of the Large Data Breach. How Website Security Breaches Occur. Last week was special.

Data breaches

Privacy and Cybersecurity Law

MAY 19, 2017

On May 15, 2017, the US Government Accountability Office (GAO) released a new report entitled “ Internet of Things: Status and implications of an increasingly connected world.” As IoT technology increases, so too will the regulatory landscape governing its use.

IoT

Security Boulevard

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. These large subscriber bases in turn generate massive data volumes.

Encryption

Thales Cloud Protection & Licensing

APRIL 29, 2024

The Thales 2024 Trust Index report indicates that 87% of consumers expect vendors to respect their digital rights, which leads to trusted relationships. However, a relentless barrage of data breaches, ransomware attacks, and sophisticated cyber threats steadily erodes this trust.

Risk

Security Boulevard

APRIL 29, 2024

The Thales 2024 Trust Index report indicates that 87% of consumers expect vendors to respect their digital rights, which leads to trusted relationships. However, a relentless barrage of data breaches, ransomware attacks, and sophisticated cyber threats steadily erodes this trust.

Risk

Centraleyes

JANUARY 12, 2025

Over the last decade, financial firms have been mandated to adopt new compliance frameworks at an unprecedented rate, partly due to the sector’s digital transformation and rising concerns around cybersecurity and consumer protection. Ensure compliance with PCI DSS requirements through real-time dashboards and reports.

Financial Services

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

This ostensibly would include employees of businesses, individuals who enter into commercial transactions with other businesses, and non-consumers of particular business. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Government

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

This ostensibly would include employees of businesses, individuals who enter into commercial transactions with other businesses, and non-consumers of particular business. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Government

Privacy and Cybersecurity Law

JULY 13, 2017

The OCR’s checklist makes clear that preparing for, and responding quickly to any potential breach should be a priority for HIPPA covered entities and their business associates.

Cyber Attacks

Privacy and Cybersecurity Law

NOVEMBER 6, 2018

Since 2014, the FDA has issued guidance governing the cybersecurity requirements for regulated medical devices. Code § 1798.91.06(d)) d)) This would ostensibly include connected medical devices that are regulated by the U.S. Food and Drug Administration (FDA).

IoT

Privacy and Cybersecurity Law

NOVEMBER 5, 2018

Since 2014, the FDA has issued guidance governing the cybersecurity requirements for regulated medical devices. Code § 1798.91.06(d)) d)) This would ostensibly include connected medical devices that are regulated by the U.S. Food and Drug Administration (FDA).

IoT

Privacy and Cybersecurity Law

MARCH 6, 2018

Last month, the United States (US) Internal Revenue Service (IRS) issued a warning to US taxpayers that cyber criminals are increasing their […].

Scams

Privacy and Cybersecurity Law

MAY 10, 2017

The US Department of Health and Human Services (HHS) announced on April 20 that it plans to launch a cybersecurity initiative modeled […].

Cybersecurity

Privacy and Cybersecurity Law

MARCH 6, 2018

Last month, the United States (US) Internal Revenue Service (IRS) issued a warning to US taxpayers that cyber criminals are increasing their efforts to steal more detailed financial information from taxpayers in order to provide a more detailed, realistic tax return and better impersonate legitimate taxpayers.

Scams

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Subcommittee on Digital Commerce and Consumer Protection. Mister Chairman and Members of the Committee, thank you for the opportunity to testify today concerning the security of credit data. We need effective regulation of data brokers.

Computers and Electronics

Krebs on Security

JANUARY 25, 2022

Then in mid-January, Jim heard from MSF via snail mail that they’d discovered a data breach. MSF said the personal information involved in this incident may have included name, date of birth, government-issued identification numbers (e.g., 14, 2022 breach notification letter from tribal lender Mountain Summit Financial.

Financial Services