Collaborate Disseminate
Jackson County Schneck Memorial Hospital (Schneck Medical Center) was a victim of a cyberattack in 2021. Its 2021 and 2022 disclosures about the breach and its lack of timely breach notification resulted in a potential class action lawsuit filed in 202… Continue reading Schneck Medical Center settles Indiana Attorney General’s lawsuit over 2021 data breach
There’s another update to the January cyberattack on TUSD by the Royal ransomware group. While the district was still claiming that sensitive data hadn’t been compromised, data from employees was already being leaked on the dark web as earl… Continue reading Update: Tucson Unified School District sends out notifications about January cyberattack
The Information Commissioner’s Office and eleven other data protection and privacy authorities from around the world have today published a joint statement calling for the protection of people’s personal data from unlawful data scraping taking place on… Continue reading Joint statement on data scraping and data protection
Scott Greenfield comments on a ruling previously noted on this site: In an underappreciated ruling, District of Columbia Judge Amit Mehta ruled that the multinational law firm Covington & Burling must comply with an SEC subpoena requiring the firm … Continue reading Cyberattacks And Compromise of Attorney Client Confidences
Seen on WebsitePlanet: Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to WebsitePlanet a non-password protected database that contained 680k records. Upon further investigation, it was identified that these records were related to e… Continue reading School Accreditation Organization Data Breach Exposed Sensitive Information on Students, Parents, and Teachers Online
Jessica Lynn Hardcastle reports: Public companies that suffer a computer crime likely to cause a “material” hit to an investor will soon face a four-day time limit to disclose the incident, according to rules approved today by the US Securi… Continue reading Crooks pwned your servers? You’ve got four days to tell us, SEC tells public companies
ProPK reports: A fine which may extend to $2 million or an equivalent amount in Pakistani rupees would be levied on those who process or cause to be processed, disseminate, or disclose personal data in violation of any of the provisions of the “Persona… Continue reading Leaking Someone’s Personal Data Will Cost You Up to $2 Million in Pakistan
Micaela McMurrough, Ashden Fein, David H. Engvall, Caleb Skeath, Kerry Burke, and Shayan Karbassi of Covington and Burling write: According to a recently-released meeting agenda, the Securities and Exchange Commission’s (“SEC”) upcoming July 26, 2023 m… Continue reading SEC to Consider Cyber Rules Next Week
On April 18, DataBreaches reported that more details had emerged on the arrest of three men by Dutch police in January. The three were suspected of hacking and extorting victims in the Netherlands and elsewhere, obtaining and selling data online, and m… Continue reading I had been chatting with a blackhat. They had been working with a whitehat. We were both dealing with the same person.
Mark Townsend reports: Facebook has dramatically agreed to settle a lawsuit seeking damages for allowing Cambridge Analytica access to the private data of tens of millions of users, four years after the Observer exposed the scandal that mired the tech … Continue reading Facebook-Cambridge Analytica data breach lawsuit ends in 11th hour settlement