Krebs on Security

AUGUST 3, 2020

A California company that helps telemarketing firms avoid getting sued for violating a federal law that seeks to curb robocalls has leaked the phone numbers, email addresses and passwords of all its customers, as well as the mobile phone numbers and other data on people who have hired lawyers to go after telemarketers.

Mobile 352

Mobile Marketing Consumer Protection Wireless 352

Dark Reading

NOVEMBER 9, 2022

Massachusetts Attorney General announced settlements across multiple states for damages from Experian's 2012 and 2015 breaches that violated consumer protection and notification laws.

Data breaches 74

Data breaches Consumer Protection Mobile 74

The Hacker News

OCTOBER 31, 2022

In today's world of automated hacking systems, frequent data breaches and consumer protection regulations such as GDPR and PCI DSS, penetration testing is now an essential security requirement for organisations of all sizes. But what should you look for when choosing the right provider?

Penetration Testing 96

Penetration Testing Consumer Protection Data breaches Hacking 96

Heimadal Security

NOVEMBER 1, 2023

Federal Trade Commission (FTC) requires all non-banking financial institutions to report data breaches to FTC within 30 days. The amendment to the Safeguard Rule refers to security incidents that impact more than 500 people.

Banking 96

Banking Consumer Protection Data breaches Cybersecurity 96

Adam Levin

DECEMBER 16, 2020

Do your homework and find a VPN service with a solid reputation for their privacy, security, and data retention policies. Unfortunately, this means that a single poorly-secured personal device can lead to a large-scale data breach. Always check your credit for new accounts or unusual activity.

VPN 245

VPN Antivirus Passwords Backups 245

The Last Watchdog

OCTOBER 16, 2023

They point out how supply chains rely on software yet lack the security tools to protect them. Data breaches exposed over 37 billion records in 2020 alone — a 141% jump from 2019. Businesses must automatically secure their supply chains to protect themselves and comply with consumer-protection laws.

Cybersecurity 147

Cybersecurity Cyber Attacks Artificial Intelligence Technology 147

Privacy and Cybersecurity Law

MAY 2, 2017

On April 6, 2017, New Mexico became the 48th state to enact a data breach notification law, leaving Alabama and South […].

Data breaches 40

Data breaches Consumer Protection 40

Privacy and Cybersecurity Law

APRIL 28, 2017

On April 4, 2017, Tennessee Governor Bill Haslam signed into law an amendment to the state’s data breach notification law, making two […].

Data breaches 40

Data breaches Encryption Consumer Protection Government 40

Krebs on Security

JANUARY 25, 2022

Then in mid-January, Jim heard from MSF via snail mail that they’d discovered a data breach. Jim said MSF ultimately agreed that the loan wasn’t legitimate, but they couldn’t or wouldn’t tell him how his information got pushed through to a loan — even though MSF was never able to pull his credit file.

Financial Services 240

Financial Services Banking Accountability Identity Theft 240

SiteLock

AUGUST 27, 2021

It’s safe to say that the volume and magnitude of high-profile data breaches and ransomware attacks that punctuated 2019 really kept the cybersecurity industry on its toes. Data breaches stole numerous headlines this year, including the notable Capital One breach that exposed more than 100 million customers’ accounts.

Cybersecurity 98

Cybersecurity Phishing Data breaches IoT 98

eSecurity Planet

SEPTEMBER 21, 2024

HIPAA also requires organizations to conduct regular risk assessments and report data breaches. Children’s Online Privacy Protection Act (COPPA) The Children’s Online Privacy Protection Act (COPPA) regulates the collection of personal information from minors to protect the privacy of children under 13.

Cybersecurity 121

Cybersecurity Computers and Electronics Cyber threats Healthcare 121

Malwarebytes

JULY 23, 2021

Two months after fully restoring its systems, CNA Financial, the leading US insurance company that was attacked by a group using Phoenix CryptoLocker ransomware, issued a legal notice of an information security incident to the Consumer Protection Bureau in New Hampshire. Phoenix posed as a browser update.

Ransomware 107

Ransomware Unstructured Data Accountability Consumer Protection 107

Thales Cloud Protection & Licensing

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail 71

Retail Data breaches Digital transformation Risk 71

Thales Cloud Protection & Licensing

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. What are Telcos particularly vulnerable to API attacks?

Encryption 139

Encryption Mobile Government Consumer Protection 139

Hot for Security

FEBRUARY 2, 2021

The videoconferencing giant must also obtain biennial assessments of its security program by an independent third party and notify the commission of any data breach. 290 million new users in four months. Due to the COVID-19 pandemic, Zoom’s install base has ballooned from 10 million in December 2019 to 300 million in April 2020.

Encryption 86

Encryption Consumer Protection Surveillance Data breaches 86

SecureWorld News

MARCH 18, 2021

According to a statement from DelBene, 70% of Americans believe their data is less secure now than it was five years ago, and 45% say they had their personal information compromised in a data breach with limited to no accountability for those responsible.

Data privacy 97

Data privacy Consumer Protection Data breaches Technology 97

Security Boulevard

NOVEMBER 5, 2024

Consumers are guarding their privacy more than ever. Any operational downtime or even worse data loss due to a data breach could significantly impact customer loyalty and their highly anticipated holiday season revenues. According to a recent study, the average cost of a retail data breach in 2024 is reported to be $3.48

Retail 64

Retail Data breaches Digital transformation Risk 64

SC Magazine

MARCH 10, 2021

“I would say that you’re talking about state data breach laws, state and federal laws against unfair and deceptive trade practices, [and] potentially HIPAA liability for health institutions that were relying on a system that was using inadequate security protocols,” Davisson continued. “If

Surveillance 129

Surveillance IoT Accountability Passwords 129

SiteLock

AUGUST 27, 2021

It’s a heartwarming tale of multiple mass data compromises, which affected yours truly. We’ll also discuss how major data breaches occur, and what you can do to protect yourself in the Age of the Large Data Breach. How Website Security Breaches Occur. Last week was special.

Data breaches 52

Data breaches Passwords Identity Theft Firewall 52

Security Boulevard

JANUARY 23, 2023

As the conversation around privacy progresses beyond a focus on security infrastructure and best practices for preventing data breaches, regulations are working to catch up.

Data privacy 52

Data privacy Data collection Consumer Protection Authentication 52

SC Magazine

FEBRUARY 10, 2021

They’re also using it for investigative purposes, such as if they believe there has been a data breach that could violate a state consumer protection or data or state data privacy law. They can be part of those investigations. So, they can be used in an offensive and a defensive manner.

Cyber Insurance 83

Cyber Insurance Insurance Cyber Risk Government 83

SiteLock

AUGUST 27, 2021

US to Raise Breach of Government Records at Talks with China. This Monday, The United States began the annual security talks with China and an official said that the US government representative would raise directly the major data breach at OPM during the discussion. Follow the SiteLock blog for the latest cybersecurity news.

Cybersecurity 52

Cybersecurity Surveillance Government Software 52

Privacy and Cybersecurity Law

SEPTEMBER 15, 2021

The obligation to report serious incidents or malfunctions recalls the obligation to notify data breaches. Artificial intelligence not only crosses over into data protection law, but also extends to other areas of law, such as intellectual property, competition, consumer protection, and insurance, to name but a few.

Artificial Intelligence 52

Artificial Intelligence Consumer Protection Technology Insurance 52

Centraleyes

APRIL 15, 2024

Genetic Information Maryland was one of a select group of states that included genetic information in their listing of personal information categories in previous Maryland consumer protection acts. HB962 expands and specifies exactly which types of genetic information are subject to breach notification requirements.

Data privacy 52

Data privacy Identity Theft Data breaches Data collection 52

Privacy and Cybersecurity Law

MARCH 23, 2018

” A prior IBM Study on the cost of data breaches found, using a sample of 419 companies in 13 countries and regions, that 47% of data breach incidents in 2016 involved a malicious or criminal attack, 25% were due to negligent employees or contractors (i.e.,

Cybersecurity 40

Cybersecurity Data breaches Artificial Intelligence IoT 40

Security Boulevard

FEBRUARY 21, 2024

Over the past year, the Telecom industry has suffered some massive, high-profile data breaches — all of which happened by exploiting unprotected APIs. These include breaches on major operators such as T-Mobile. What are Telcos particularly vulnerable to API attacks?

Encryption 64

Encryption Mobile Government Consumer Protection 64

Centraleyes

JUNE 10, 2024

Data Handling: Assist the controller in fulfilling data protection obligations, such as data breach notifications or handling data subject requests. What rights do consumers have under the UCPA? Access: Consumers have the right to know what personal data is being collected about them.

Data collection 52

Data collection Data privacy Consumer Protection Data breaches 52

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

Thus, if a business encrypts the personal information of the consumer, and that information is stolen, there will be no private right of action under the CCPA. That does not mean, however, that the business would be completely off the hook.

Government 58

Government Internet Internet Consumer Protection 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

Thus, if a business encrypts the personal information of the consumer, and that information is stolen, there will be no private right of action under the CCPA. That does not mean, however, that the business would be completely off the hook.

Internet 58

Internet Internet Consumer Protection Education 58

Privacy and Cybersecurity Law

MAY 12, 2017

On May 11, 2017, the American Bar Association (ABA) issued Formal Opinion 477, making clear that a lawyer may transmit information […].

Cybersecurity 52

Cybersecurity Consumer Protection Data breaches 52

Privacy and Cybersecurity Law

MAY 17, 2017

The National Institute of Standards and Technology (NIST) is holding a Cybersecurity Framework Workshop this week at its headquarters in Gaithersburg, Maryland. […].

Internet 52

Internet Internet IoT Cybersecurity 52

Privacy and Cybersecurity Law

JULY 13, 2017

Last month, after the WannaCry ransomware attack infected 230,000 computers in 150 countries, the US Department of Health and Human […].

Cyber Attacks 52

Cyber Attacks Ransomware Consumer Protection Data breaches 52

Privacy and Cybersecurity Law

MARCH 6, 2018

Last month, the United States (US) Internal Revenue Service (IRS) issued a warning to US taxpayers that cyber criminals are increasing their […].

Scams 52

Scams Consumer Protection Data breaches Government 52

Privacy and Cybersecurity Law

JULY 13, 2017

164.304.

Cyber Attacks 49

Cyber Attacks Cyber threats Healthcare Ransomware 49

Privacy and Cybersecurity Law

NOVEMBER 6, 2018

California recently became the first state in the union to pass a cybersecurity law addressing “smart” devices and Internet of Things (IoT) technology. The term IoT generally refers to anything connected to the internet, including smart home devices (e.g., Amazon’s Alexa, NEST thermostats, etc.).

IoT 45

IoT Cybersecurity Manufacturing Technology 45

Privacy and Cybersecurity Law

NOVEMBER 5, 2018

California recently became the first state in the union to pass a cybersecurity law addressing “smart” devices and Internet of Things (IoT) technology. The term IoT generally refers to anything connected to the internet, including smart home devices (e.g., Amazon’s Alexa, NEST thermostats, etc.).

IoT 45

IoT Cybersecurity Manufacturing Technology 45

Privacy and Cybersecurity Law

FEBRUARY 24, 2014

One of the most interesting and important developments in retail privacy cases is a recent unpublished decision, Capp v. Nordstrom. […].

Retail 40

Retail Consumer Protection Data breaches 40