Questions raised after Cherry Creek students notified of data breach, lawsuit

Abraham Jewett reports: The Cherry Creek School District sent a message to families recently after some students received a notice about a class action settlement over a 2024 data breach involving the web-based education platform Naviance. The school d… Continue reading Questions raised after Cherry Creek students notified of data breach, lawsuit

BakerHostetler’s 2026 report: Findings from 1,250 clients’ breach experiences in 2025

BakerHostetler’s annual report, which shares their experiences as a law firm representing data breach clients, is always one of my favorite reads, and their 2026 Data Security Incident Response Report does not disappoint. As always, it is chock-f… Continue reading BakerHostetler’s 2026 report: Findings from 1,250 clients’ breach experiences in 2025

European Commission investigates cyber attack on its websites; CERT-EU publishes recommendations

Politico reported: The European Commission is investigating a cyber attack on its websites, with early findings suggesting that some data was taken, it said Friday. The EU executive said it discovered the attack on Tuesday and took “immediate steps” to… Continue reading European Commission investigates cyber attack on its websites; CERT-EU publishes recommendations

Apex recovers stolen personal data after about 22K impacted in cyberattack: Town

When criminals store or host data on U.S. servers, victims may get lucky. This is one of those situations. Matthew Sockol reports that data from the town of Apex in North Carolina had been stolen in an attempted ransomware attack in July 2024. The data… Continue reading Apex recovers stolen personal data after about 22K impacted in cyberattack: Town

Italy’s data protection regulator fined Intesa Sanpaolo €31.8 million over insider data breach

From the Garante’s press release, below, it sounds like the banking group experienced an insider-wrongdoing breach in which an employee improperly accessed  3,573 customer accounts over a period of two years. Data breach: The Italian Data Protect… Continue reading Italy’s data protection regulator fined Intesa Sanpaolo €31.8 million over insider data breach