Collaborate Disseminate
Rashmi Ramesh reports: A well-phrased email was all an attacker would have needed to trick Microsoft Copilot into handing over sensitive data until the operating system giant patched the vulnerability. The vulnerability in Microsoft 365 Copilot allowed… Continue reading Copilot AI Bug Could Leak Sensitive Data via Email Prompts
Today, the FTC released Frequently Asked Questions that discuss the requirements of the Safeguards Rule, which was mandated by the Gramm-Leach-Bliley Act, and how it specifically applies to motor vehicle dealers. The FTC is committed to providing certa… Continue reading FTC Provides Guidance on Updated Safeguards Rule
Hiring employees who work remotely can pose additional challenges for security and compliance with regulations. In March, Sentara Health disclosed an incident concern that resulted in the notification of 1,620 patients. They described the concern this … Continue reading Sentara Health terminates remote employees after realizing they couldn’t be sure who was doing the work.
Bogdan Popa reports: Indian company Zoomcar, best known for its car-sharing model that allows customers to rent vehicles from individuals, has recently acknowledged a data breach that exposed the data of 8.4 million users. The NASDAQ-listed firm reveal… Continue reading Hackers Break Into Car Sharing App, 8.4 Million Users Affected
It is not often that a ransomware attack or cyberattack is wholly responsible for a business failing. With each such claim that is investigated, we sometimes find that an entity was already in financial distress and the attack may just have been one st… Continue reading Cyberattack pushes German napkin company into insolvency
June 13 – Michelle Shropshire, 54, of Waldorf, Maryland, and Harlisha Jones, 49, of Clinton, Maryland, and Washington, DC, were arrested this morning on health care fraud, wire fraud, mail fraud, aggravated identity theft, and conspiracy charges filed … Continue reading WMATA Train Operators Arrested in Health Care Fraud Scheme
Reuters reports: A cyberattack on the Washington Post compromised the email accounts of several journalists and was most likely the work of a foreign government, the Wall Street Journal reported on Sunday. Matt Murray, the Washington Post’s executive e… Continue reading Washington Post investigating cyberattack on journalists, WSJ reports
For a summary of basic state notification requirements that apply to entities who “own” data, download Foley & Lardner’s State Data Breach Notification Laws Chart. They write: This chart is current as of June 2, 2025, and should be used for informa… Continue reading Resource: State Data Breach Notification Laws – June 2025
Lawrence Abrams reports: WestJet, Canada’s second-largest airline, is investigating a cyberattack that has disrupted access to some internal systems as it responds to the breach. “WestJet is aware of a cybersecurity incident involving inter… Continue reading WestJet investigates cyberattack disrupting internal systems
Claims of “negligence” are often raised in lawsuits. DataBreaches is not a lawyer, of course, but wonders whether by now, we should consider a plastic surgeon “negligent” in their data security if they store nude photos of their… Continue reading Plastic surgeons often store nude photos of patients with their identity information. When would we call that “negligent?”