Collaborate Disseminate
Jesse Leavenworth reports: A Glastonbury-based company that hosts thousands of school websites in Connecticut and across the nation continued to recover Monday from a ransomware attack launched last week. “We still have no evidence that any data has be… Continue reading Connecticut company that hosts school websites recovering from ransomware attack
Craig Carpenter and Erika Vela of BakerHostetler write: As the BakerHostetler Digital Risk Advisory and Cybersecurity team wraps up the 2022 edition of annual Data Security Incident Response (DSIR) Report, we take one last look at the findings in the 2… Continue reading The Impact of Data Security Incident Trends on Commercial Transactions: Part III – Vendor Agreement Resolutions for 2022
Lawrence Abrams reports: FinalSite, a leading school website services provider, has suffered a ransomware attack disrupting access to websites for thousands of schools worldwide. FinalSite is a software as a service (SaaS) provider that offers website … Continue reading FinalSite ransomware attack shuts down thousands of school websites
In December, 2020, the FTC announced a proposed settlement with Texas-based Ascension Data & Analytics after a security breach involving one of its vendors resulted in the exposure of, and unauthorized access to, consumers’ mortgage applicati… Continue reading FTC Finalizes Order with Mortgage Analytics Firm, Requiring it to Strengthen Security Safeguards, Increase Oversight of Vendors
Someone on Twitter asked me what the first breach of 2022 would be. The following public notice is not the first breach of 2022. It is a 2021 breach that just showed up after midnight in my news search this morning. And because it involves a third-part… Continue reading UVA Health notified patients after Ciox Health data breach
101.5 reports: Receiving a printed state document could prove to be a challenge because of an issue with the vendor used by the state. The state office of Office of Information Technology, which facilitates the service, said vendor R.R. Donnelley &… Continue reading Vendor hack slows NJ state agency’s ability to print documents
5News reports that an Arkansas county has been hit by a cyberattack, although the details are not yet clear: According to Crawford County Judge Dennis Gilstrap, a cyberattack was discovered at the County Assessors office on Monday, Dec. 27. Gilstrap sa… Continue reading AR: Crawford County Assessor’s Office is the latest public entity to be hit by a cyberattack.
It appears that a ransomware incident involving VPN Solutions LLC may have affected a number of covered entities, although so far, DataBreaches.net has only identified two confirmed cases: Surgery Group SC On December 17, Surgery Group SC in Illinois … Continue reading VPN Solutions LLC suffered a ransomware attack two months ago. Some clients still can’t access patient data hosted on the service.
Jay Willett reports: COVID-19 vaccination clinics scheduled on Northeastern University’s Boston campus have been cancelled following the discovery of registrants’ personal information being exposed by Pelmeds, a third-party vaccine provider… Continue reading MA: Northeastern Cancels Vaccination Clinics After Third-Party Information Leak
Simon Sharwood reports: Personal information describing names, addresses, bank account details, and taxation IDs of 38,000 Australian government employees has been leaked to the dark web after a ransomware attack. The treasurer of the Australian State … Continue reading Ransomwared payroll provider leaks data on 38,000 Australian government workers