School cyber incidents on Long Island: Reported cases rose sharply in 2023

Craig Schneider reports: Long Island schools saw a big increase in the number of reported computer hacks and other cyber incidents in 2023 compared to the prior year, and human error continued to be a major cause of exposing sensitive student informati… Continue reading School cyber incidents on Long Island: Reported cases rose sharply in 2023

NIST Publishes Final “Cybersecurity Resource Guide” on Implementing the HIPAA Security Rule

Jennifer Hennessy and Christopher Taylor of Foley & Lardner write: In an important development for HIPAA-regulated entities looking for practical assistance in understanding, implementing, and enhancing compliance with the HIPAA Security Rule, the … Continue reading NIST Publishes Final “Cybersecurity Resource Guide” on Implementing the HIPAA Security Rule

An Update on the SEC’s Cybersecurity Reporting Rules

Hunton Andrews Kurth write: As we pass the two-month anniversary of the effectiveness of the U.S. Securities and Exchange Commission’s (“SEC’s”) Form 8-K cybersecurity reporting rules under new Item 1.05, this blog post provides a high-level summary of… Continue reading An Update on the SEC’s Cybersecurity Reporting Rules

Change Healthcare responding to cyberattack; few details known at this point

Early yesterday, Change Healthcare reported that they were experiencing enterprise-wide connectivity issues. They didn’t call it a cyberattack at that point, but by mid-day, their status reports were indicating that they were experiencing “… Continue reading Change Healthcare responding to cyberattack; few details known at this point

Data Breach Putative Class Action Questions Whether Broker Was Swift Enough in Notice and Response

Andrea DeField and Matthew J. Revis of Hunton Andrews Kurth write: While America was tuned into the big game, one California insurance broker faced its own treacherous showdown in the form of a putative class action filed on February 8, 2024 stemming f… Continue reading Data Breach Putative Class Action Questions Whether Broker Was Swift Enough in Notice and Response

Updating: Prince George’s County Public Schools breach affected almost 100,000

In August 2023, Prince George’s County Public Schools disclosed a cyberattack. At the time, they reported that “an estimated 4,500 user accounts out of 180,000 were impacted, primarily staff accounts. The school system is still assessing the full… Continue reading Updating: Prince George’s County Public Schools breach affected almost 100,000

Ukrainian man pleads guilty in cyberattack that temporarily disrupted major Vermont hospital

AP reports: A Ukrainian man has pleaded guilty to involvement in two separate malware schemes including a cyberattack at the University of Vermont Medical Center in 2020 that temporarily shut down some of its vital services and cost it tens of millions… Continue reading Ukrainian man pleads guilty in cyberattack that temporarily disrupted major Vermont hospital