Collaborate Disseminate
The National Association of Insurance Commissioners (NAIC) is the U.S. standard-setting and regulatory support organization. It is governed by the chief insurance regulators from the 50 states, the District of Columbia, and five U.S. territories. The o… Continue reading NAIC suspends investment risk designations after cyber attack
Rex Edison reports A single cyberattack dented an entire country’s GDP. The Cyber Monitoring Centre estimates that the ransomware assault on Jaguar Land Rover cost the UK economy £1.9 billion — roughly $2.5 billion — rippling through more than 5,… Continue reading Russian Hackers Behind the $2.5 Billion Jaguar Land Rover Cyberattack, Investigators Say
Melanie Conroy of Pierce Atwood LLP writes: The First Circuit recently affirmed dismissal of a putative data breach class action against Bayamón Medical Center (BMC), holding that the plaintiff failed to plausibly allege that her injuries were traceabl… Continue reading First Circuit Affirms Dismissal of Data Breach Class Action for Lack of Traceable Injury
Predrag Milic reports: An Iranian national who is wanted by the United States for mass hacking attacks that caused damage of $3.4 billion was arrested in Montenegro, police in the Balkan country said late Thursday. The 39-year-old man, who holds both … Continue reading Iranian-Turkish national sought by US on hacking charges arrested in Montenegro
They could have — and should have — anticipated great curiosity about this particular patient’s medical records. Did they control access well enough? Emily Stevens reports: The medical records of a young boy who was attacked by a croc… Continue reading UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo
The UK Information Commissioner’s Office (ICO) has released a report titled “EdTech examined — Key Findings from Our Audits.” The ICO issued the following statement to accompany the report’s release: Today, the ICO has pub… Continue reading UK: ICO statement on ‘Edtech examined’ report
NATHAN AUSTAD, one of three people indicted for hacking DraftKings in 2022 has now been sentenced to 18 months in prison. In April, a second man, KAMERIN STOKES, a/k/a “TheMFNPlug,” was sentenced to 30 months in prison for his role, while JOSEPH GARRIS… Continue reading Third Defendant Sentenced To Prison For Hacking DraftKings
In August 2025, DataBreaches added the Colorado Health Network (CHN) to our non-public worksheets after threat actors called Cephalus added the provider to its’ dark web leak site with a claim that they had acquired 900 GB of data. Cephalus disap… Continue reading Colorado Health Network Notifies Patients of Last Year’s Breach—But Key Details Remain Undisclosed
Yes, another entry in our “no need to hack when it’s leaking” archives, and another example of entities trying to excuse their security failures by claiming they were “hacked.” Danny Bradbury cuts to the chase: Some organ… Continue reading No need to hack when it’s leaking: Dialog edition
Kyiv Post reports: Ukrposhta, Ukraine’s national postal service, announced system malfunctions following a cyberattack overnight going into Thursday. In a brief update, the state-run postal service said it is working to restore operations and would pro… Continue reading Ukraine’s National Postal Service Ukrposhta Hacked Overnight