Schneier on Security

DECEMBER 19, 2018

The US House of Representatives Committee on Oversight and Government Reform has just released a comprehensive report on the 2017 Equifax hack. Here is my testimony before before the House Subcommittee on Digital Commerce and Consumer Protection last November. Lance Spitzner also commented on this.

Data breaches 200

Data breaches Consumer Protection Government Hacking 200

Malwarebytes

MARCH 16, 2022

The US Federal Trade Commission (FTC) has announced that it took action against online customized merchandise platform CafePress over allegations that it failed to secure consumers’ sensitive personal data and covered up a major breach. CafePress has already settled with seven US states as a result of this data breach.

Data breaches 127

Data breaches Passwords Authentication Social Engineering 127

eSecurity Planet

SEPTEMBER 21, 2024

The landscape of cybersecurity laws and regulations today is set to undergo significant changes, impacting businesses, government entities, and individuals alike. HIPAA also requires organizations to conduct regular risk assessments and report data breaches. What are Federal Cybersecurity Regulations?

Cybersecurity 119

Cybersecurity Computers and Electronics Cyber threats Healthcare 119

eSecurity Planet

AUGUST 9, 2022

GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. See the Top Governance, Risk and Compliance (GRC) Tools. Health data and patient data in the U.S. Financial Data Protection Laws. In the U.S.,

Data privacy 145

Data privacy Encryption Data breaches Insurance 145

Thales Cloud Protection & Licensing

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. These large subscriber bases in turn generate massive data volumes.

Encryption 139

Encryption Mobile Government Consumer Protection 139

Privacy and Cybersecurity Law

APRIL 28, 2017

On April 4, 2017, Tennessee Governor Bill Haslam signed into law an amendment to the state’s data breach notification law, making two […].

Data breaches 40

Data breaches Encryption Consumer Protection Government 40

SC Magazine

FEBRUARY 10, 2021

Government agencies don’t make endorsements necessarily but they’re identifying security ratings as a cyber risk metric. CISA focuses on critical infrastructure, which includes a number of sectors such as health care and energy and transportation and includes the government. A rating is more than just a number.

Cyber Insurance 83

Cyber Insurance Insurance Cyber Risk Government 83

Thales Cloud Protection & Licensing

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail 71

Retail Data breaches Risk Digital transformation 71

SiteLock

AUGUST 27, 2021

US to Raise Breach of Government Records at Talks with China. This Monday, The United States began the annual security talks with China and an official said that the US government representative would raise directly the major data breach at OPM during the discussion.

Cybersecurity 52

Cybersecurity Surveillance Government Consumer Protection 52

SecureWorld News

MARCH 18, 2021

According to a statement from DelBene, 70% of Americans believe their data is less secure now than it was five years ago, and 45% say they had their personal information compromised in a data breach with limited to no accountability for those responsible.

Data privacy 98

Data privacy Consumer Protection Data breaches Technology 98

Privacy and Cybersecurity Law

MAY 19, 2017

On May 15, 2017, the US Government Accountability Office (GAO) released a new report entitled “Internet of Things: Status and implications of an […].

Internet 40

Internet Internet Government Accountability 40

Security Boulevard

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail 64

Retail Data breaches Risk Digital transformation 64

SiteLock

AUGUST 27, 2021

It’s a heartwarming tale of multiple mass data compromises, which affected yours truly. We’ll also discuss how major data breaches occur, and what you can do to protect yourself in the Age of the Large Data Breach. How Website Security Breaches Occur. Last week was special.

Data breaches 52

Data breaches Identity Theft Firewall Passwords 52

Privacy and Cybersecurity Law

MAY 19, 2017

On May 15, 2017, the US Government Accountability Office (GAO) released a new report entitled “ Internet of Things: Status and implications of an increasingly connected world.” As IoT technology increases, so too will the regulatory landscape governing its use.

IoT 40

IoT Computers and Electronics Internet Internet 40

Security Boulevard

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. These large subscriber bases in turn generate massive data volumes.

Encryption 64

Encryption Mobile Government Consumer Protection 64

Thales Cloud Protection & Licensing

APRIL 29, 2024

The Thales 2024 Trust Index report indicates that 87% of consumers expect vendors to respect their digital rights, which leads to trusted relationships. However, a relentless barrage of data breaches, ransomware attacks, and sophisticated cyber threats steadily erodes this trust.

Risk 71

Risk Manufacturing Cyber threats Digital transformation 71

Security Boulevard

APRIL 29, 2024

The Thales 2024 Trust Index report indicates that 87% of consumers expect vendors to respect their digital rights, which leads to trusted relationships. However, a relentless barrage of data breaches, ransomware attacks, and sophisticated cyber threats steadily erodes this trust.

Risk 72

Risk Manufacturing Cyber threats Digital transformation 72

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

This ostensibly would include employees of businesses, individuals who enter into commercial transactions with other businesses, and non-consumers of particular business. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Government 58

Government Internet Internet Consumer Protection 58

Centraleyes

JANUARY 12, 2025

Over the last decade, financial firms have been mandated to adopt new compliance frameworks at an unprecedented rate, partly due to the sector’s digital transformation and rising concerns around cybersecurity and consumer protection. Ensure compliance with PCI DSS requirements through real-time dashboards and reports.

Financial Services 52

Financial Services Data privacy Risk Banking 52

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

This ostensibly would include employees of businesses, individuals who enter into commercial transactions with other businesses, and non-consumers of particular business. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Internet 58

Internet Internet Government Consumer Protection 58

Privacy and Cybersecurity Law

JULY 13, 2017

The OCR’s checklist makes clear that preparing for, and responding quickly to any potential breach should be a priority for HIPPA covered entities and their business associates.

Cyber Attacks 49

Cyber Attacks Cyber threats Healthcare Technology 49

Privacy and Cybersecurity Law

NOVEMBER 6, 2018

Since 2014, the FDA has issued guidance governing the cybersecurity requirements for regulated medical devices. Code § 1798.91.06(d)) d)) This would ostensibly include connected medical devices that are regulated by the U.S. Food and Drug Administration (FDA).

IoT 45

IoT Cybersecurity Manufacturing Technology 45

Privacy and Cybersecurity Law

NOVEMBER 5, 2018

Since 2014, the FDA has issued guidance governing the cybersecurity requirements for regulated medical devices. Code § 1798.91.06(d)) d)) This would ostensibly include connected medical devices that are regulated by the U.S. Food and Drug Administration (FDA).

IoT 45

IoT Cybersecurity Manufacturing Technology 45

Privacy and Cybersecurity Law

MARCH 6, 2018

Last month, the United States (US) Internal Revenue Service (IRS) issued a warning to US taxpayers that cyber criminals are increasing their […].

Scams 52

Scams Consumer Protection Data breaches Government 52

Privacy and Cybersecurity Law

MAY 10, 2017

The US Department of Health and Human Services (HHS) announced on April 20 that it plans to launch a cybersecurity initiative modeled […].

Cybersecurity 40

Cybersecurity Consumer Protection Data breaches Government 40

Privacy and Cybersecurity Law

MARCH 6, 2018

Last month, the United States (US) Internal Revenue Service (IRS) issued a warning to US taxpayers that cyber criminals are increasing their efforts to steal more detailed financial information from taxpayers in order to provide a more detailed, realistic tax return and better impersonate legitimate taxpayers.

Scams 40

Scams Identity Theft Banking Encryption 40

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Subcommittee on Digital Commerce and Consumer Protection. Mister Chairman and Members of the Committee, thank you for the opportunity to testify today concerning the security of credit data. We need effective regulation of data brokers.

Computers and Electronics 224

Computers and Electronics Identity Theft Internet Internet 224

Krebs on Security

JANUARY 25, 2022

Then in mid-January, Jim heard from MSF via snail mail that they’d discovered a data breach. MSF said the personal information involved in this incident may have included name, date of birth, government-issued identification numbers (e.g., 14, 2022 breach notification letter from tribal lender Mountain Summit Financial.

Financial Services 248

Financial Services Banking Accountability Identity Theft 248