ZA: Copying the wrong person on an email could be considered a data breach in South Africa

Jan Vermeulen reports: Misdirected internal emails that expose personal information can trigger mandatory data breach reporting under South Africa’s data privacy law, POPIA, even when the disclosure was accidental. Armand Swart, Hlonelwa Lutuli, and Is… Continue reading ZA: Copying the wrong person on an email could be considered a data breach in South Africa

A KDDI data breach has put up to 14.2 million ISP email logins at risk across Japan

James Whitmore reports: Data breach at Japanese telecoms operator KDDI may have exposed up to 14.22 million email addresses and passwords linked to ISP mail services, after attackers gained unauthorised access to a system used by six providers in Japan… Continue reading A KDDI data breach has put up to 14.2 million ISP email logins at risk across Japan

AssuranceAmerica breach may have affected more than 1.1 million people in seven states

Krys Shahin and Christopher Buchanan report: State officials are warning at least 1.1 million people across seven states may be impacted by an AssuranceAmerica data breach. Notices about the breach were sent to California, Massachusetts, Nebraska, Sout… Continue reading AssuranceAmerica breach may have affected more than 1.1 million people in seven states

Russian Hackers Behind the $2.5 Billion Jaguar Land Rover Cyberattack, Investigators Say

Rex Edison reports A single cyberattack dented an entire country’s GDP. The Cyber Monitoring Centre estimates that the ransomware assault on Jaguar Land Rover cost the UK economy £1.9 billion — roughly $2.5 billion — rippling through more than 5,… Continue reading Russian Hackers Behind the $2.5 Billion Jaguar Land Rover Cyberattack, Investigators Say

First Circuit Affirms Dismissal of Data Breach Class Action for Lack of Traceable Injury

Melanie Conroy of Pierce Atwood LLP writes: The First Circuit recently affirmed dismissal of a putative data breach class action against Bayamón Medical Center (BMC), holding that the plaintiff failed to plausibly allege that her injuries were traceabl… Continue reading First Circuit Affirms Dismissal of Data Breach Class Action for Lack of Traceable Injury

Iranian-Turkish national sought by US on hacking charges arrested in Montenegro

Predrag Milic  reports: An Iranian national who is wanted by the United States for mass hacking attacks that caused damage of $3.4 billion was arrested in Montenegro, police in the Balkan country said late Thursday. The 39-year-old man, who holds both … Continue reading Iranian-Turkish national sought by US on hacking charges arrested in Montenegro

UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo

They could have — and should have — anticipated great curiosity about this particular patient’s medical records. Did they control access well enough? Emily Stevens reports: The medical records of a young boy who was attacked by a croc… Continue reading UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo