Collaborate Disseminate
Stefanie Ferrari of BakerHostetler writes: Vendor-caused incidents continued to surge in 2021. Nearly 20 percent of the total incidents we handled last year were caused by vendors, with more than half requiring notification. As in prior years, vendor i… Continue reading 2022 DSIR Deeper Dive: Vendor Incidents
Mike Rogoway reports: Ruby Receptionists, the Portland company that serves as a phone receptionist for thousands of small businesses, has suffered a major outage that knocked it offline all week. One of Ruby’s online vendors was hit by a cyberattack th… Continue reading Cyberattack at Opus Interactive knocks Ruby Receptionists offline, disrupting service for thousands
From their May 9 10-Q filing: Our IT systems and third-party cloud services are potentially vulnerable to cyber-attacks, including ransomware, or other data security incidents, by employees or others, which may expose sensitive data to unauthorized per… Continue reading Omnicell reveals ransomware incident in SEC filing
KTVZ reports: A ransomware attack on a campaign finance firm has prompted the Oregon Elections Division to require that 1,100 users of the state’s online campaign contribution reporting system change their passwords, but Sectary of State Shemia F… Continue reading Cyber attack prompts security response by Oregon secretary of state
Natalie Chuck reports that another district in Colorado has sent letters to parents about the breach at Illuminate Education that impacted more than 820,000 students in New York City as well as 24 other districts and 18 charter schools in NY: Someone, … Continue reading Another school district notifies parent of Illuminate breach
Jared Goffinet reports on a third-party breach affecting some Ohio schools: A ransomware attack of a third-party data company may impact some current and former Lakota Local Schools students. Battelle for Kids was the recent victim of a data breach, ac… Continue reading Current, former Lakota Local Schools students possibly impacted by third-party data breach
Olivia Brown reports: Courier company Mailpac Group Limited, and Florida, United States-based logistics management and package delivery company, Aeropost, have come under fire over an email informing customers of a credit card breach. One customer shar… Continue reading Mailpac customers affected by Aeropost data breach
Benjamin Freed reports: A school district in Coventry, Connecticut, notified families of its students this week that students’ data may have been swept up in a breach of one of its vendors earlier this year. The breach-notification letter, dated Tuesd… Continue reading Illuminate Education breach that affected NYC schools spreads to other districts
Isaiah Poritz reports: Kaiser Foundation Health Plan Inc. won a preliminary injunction in California federal court against medical records company SureFile Filing Systems for attempting to sell patient data using Kaiser’s trademarks. Kaiser is likely t… Continue reading Kaiser Wins Trademark Injunction Against Patient Data Company
Joshua Freeman reports that a Canadian airline’s flights were disrupted after an attack on the firm that provides its check-in system: “Obviously, this is a terrible situation and one that we didn’t expect,” Sunning CEO Mark Williams told C… Continue reading Sunwing president apologizes to stranded passengers, says outage result of cyberattack