First American Financial website leaked 885 million documents

Yikes, major exposure!   About 885 million documents, including bank account numbers, mortgage records, Social Security numbers, drivers’ license images and tax records, have been leaked by First American Financial Corp.’s website. Anyone with a web browser and a URL for a legitimate document could access the real estate title company’s records. Full article here…

Anthem’s $16M breach settlement reminds others to assess their cyber risks

Another example why Healthcare companies must invest in unconventional controls to protect their members and patients. This is not a simple check box process, the bad guys continue to change tactics and build game plans how to beat existing products and known controls. Brand, reputation, trust at stake. Read full article here

What We Know About the Facebook Hack Affecting 50 Million Accounts

More issues with exposed credentials On Friday, Facebook announced that it had discovered evidence of a security breach affecting almost 50 million accounts. The company’s investigation is in its early stages, so there are still many unknowns about the cyberattack. Here’s a rundown of what we know so far based on the details that Facebook has released[…]

Scammers steal half-a-billion pounds from UK banking customers

Industry group UK Finance said £145m of that was due to authorised push payment (APP) scams, in which people are conned into sending money to another account. But £358m was lost to unauthorised fraud, which includes transactions made without account holders’ knowledge. Unauthorised fraud victims are usually refunded by their banks, but most victims of[…]

The rise of cybersecurity insurance

This is the hottest product in the Insurance industry…no surprise given current state….big market opportunity to price/assess customers fairly and pay for compromise… All companies are potential victims of cyber attacks, and buying insurance is one way many are trying to manage that risk. Why it matters: Companies hit by attacks are exposed to incredible costs[…]

GDPR Effect: Data Protection Complaints Spike

This trend will continue as Global companies strive to improve PII data protection on prem and in the cloud.   Three months after the EU’s General Data Protection Regulation went into full effect, the U.K.’s data privacy watchdog says that the number of complaints it has received under GDPR has nearly doubled (see Europe’s Strong GDPR Privacy Rules[…]

Cybersecurity startup Exabeam raises $50 million to be ‘the next Splunk’

Exabeam, a cybersecurity startup that leverages big data, machine learning, and analytics to detect and respond to cyber threats, has raised $50 million in a series D round of funding led by Lightspeed Venture Partners, with participation from Cisco Investments, Norwest Venture Partners, Aspect Ventures, Icon Ventures, and Shlomo Kramer. Congratulations to Exabeam! One of my Fortune Top[…]

WannaCry Outbreak Hits Chipmaker, Could Cost $170 Million

Taiwan Semiconductor Manufacturing Co., the world’s largest chip manufacturer, says a WannaCry infection hit unpatched Windows 7 systems in its fabrication facilities, leaving multiple factories crippled. The chipmaker traced the infection to a new software tool that it failed to scan for malware before installation, and says the outbreak could cost it $170 million.

Goldman Sachs Leads $40 Million Investment in Anti-Phishing Firm Agari

Article Congratulations to Agari!!! They have consistently delivered impact and value for my customers. Goldman Leading the series E raise of 40MM is great validation. E-Mail remains the #1 way bad guys penetrate and exploit Global accounts….Agari is the E-Mail Security leader in protecting customers and stopping the sophisticated use cases getting past E-Mail SPAM[…]

F.B.I.’s Urgent Request: Reboot Your Router to Stop Russia-Linked Malware – The New York Times

Hoping to thwart a sophisticated malware system linked to Russia that has infected hundreds of thousands of internet routers, the F.B.I. has made an urgent request to anybody with one of the devices: Turn it off, and then turn it back on. Source: F.B.I.’s Urgent Request: Reboot Your Router to Stop Russia-Linked Malware – The[…]

The Cybersecurity 202: Why cybersecurity experts are so concerned about the health-care industry – The Washington Post

New research released by two security companies paints an unsettling picture for the health-care industry: Hackers are stepping up their attacks on hospitals and other health organizations that may be ill prepared to defend against the wave of malicious activity. Source: The Cybersecurity 202: Why cybersecurity experts are so concerned about the health-care industry –[…]

Australian Information Commissioner slammed for keeping quiet over lost Commonwealth Bank data – Security – CRN Australia

Australia’s information commissioner has come under fire after it emerged last week that it failed to recover lost customer account data from the Commonwealth Bank and deemed it ‘low risk’. Source: Australian Information Commissioner slammed for keeping quiet over lost Commonwealth Bank data – Security – CRN Australia

Center for Orthopaedic Specialists notifies 85,000 patients of ransomware attack

The Center for Orthopaedic Specialists (COS) recently learned that our computer system was compromised by a security event that affected our three facilities in West Hills, Simi Valley and Westlake Village, Calif. Malicious software was used to gain access to and encrypt patient data in our system in the hopes of getting COS to pay[…]

Email Breach at Oxygen Equipment Maker Affects 30,000

Unauthorized access to an employee’s email account has resulted in a breach affecting 30,000 current and former rental customers of Inogen, a maker and supplier of oxygen equipment, the publicly traded company has disclosed in a filing with the Securities and Exchange Commission. Source: Email Breach at Oxygen Equipment Maker Affects 30,000

A woman runs past an Under Armour store in Chicago in October 2017. Under Armour. (Christopher Dilts/Bloomberg News)

Under Armour discloses MyFitnessPal data breach – MarketWatch

Under Armour Inc. UA, +1.13% said late Thursday it has detected a data breach in MyFitnessPal user accounts. The breach did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, which the company does not collect from users, or credit-card data, which is processed separately, Under Armour said. About 150 million user accounts were[…]

Pennsylvania Sues Uber Over Late Breach Notification

Pennsylvania on Monday filed a lawsuit against Uber for allegedly violating the state’s mandatory breach notification law. It’s the latest in a long string of legal and regulatory actions Uber is facing from a serious data breach the company waited more than a year to disclose. Source: Pennsylvania Sues Uber Over Late Breach Notification

An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported – The New York Times

The public is blind to the magnitude of the state cybercrimes. Bank robberies are reported daily with small $$$$ amounts while the same day many companies are paying ransomware $$$ to keep IT systems alive….Brand, reputation and trust are part of the reason the public is blind to current state. GDPR is the start of[…]

Rs 500, 10 minutes, and you have access to billion Aadhaar details

It was only last November that the UIDAI asserted that “Aadhaar data is fully safe and secure and there has been no data leak or breach at UIDAI.” Today, The Tribune “purchased” a service being offered by anonymous sellers over WhatsApp that provided unrestricted access to details for any of the more than 1 billion[…]

Insider Allegedly Steals Mental Health Data of 28,000 Patients

The alleged theft of mental health information on more than 28,000 patients in Texas, which went undetected for well over a year, is yet another reminder of the substantial risks that terminated employees can pose as well as the need to take extra steps to protect the most sensitive patient information. Source: Insider Allegedly Steals[…]

Hilton Was Fined $700K for a Data Breach. Under GDPR It Would Be $420M | Digital Guardian

Consider $2 per lost record versus $1,200 per lost record. That’s the difference between what Hilton will pay to New York State versus what it will pay to EU regulators once the GDPR takes effect in May. Source: Hilton Was Fined $700K for a Data Breach. Under GDPR It Would Be $420M | Digital Guardian

Uber Paid Hackers to Delete Stolen Data on 57 Million People – Bloomberg

PII data at a premium in the dark web… Many more to follow, watch your credit cards. Hackers stole the personal data of 57 million customers and drivers from Uber Technologies Inc., a massive breach that the company concealed for more than a year. Source: Uber Paid Hackers to Delete Stolen Data on 57 Million[…]