The data of more than six million individuals was jeopardized when Infosys McCamish Systems suffered a ransomware attack last Fall.
HealthTech Security’s Post
More Relevant Posts
-
Non-phishable multi-factor authentication is essential to defeating identity and authentication related threats. Device-bound FIDO passkeys from FEITIAN Technologies US do the job. Migrating to passwordless authentication can be the answer for many. In connection to the attack on the health insurer, the FBI and CISA suggests that others take the following steps to protect themselves: - Routinely take inventory of assets and data to identify authorized and unauthorized devices and software. - Prioritize remediation of known exploited vulnerabilities. - Enable and enforce multifactor authentication with strong passwords. - Close unused ports and remove applications not deemed necessary for day-to-day operations.
Blackcat Blamed in Massive Health Insurance Hack -- Redmondmag.com
redmondmag.com
To view or add a comment, sign in
-
🚨 Cyber News 🗞 Former Uber Chief Information Security Officer Breaks Silence After 6 Years, Discusses Data Breach and SolarWinds Incident 1️⃣ Joe Sullivan, former Uber CISO, avoided prison time despite facing federal charges for failing to report a 2016 cybersecurity breach affecting over 50 million records of customers and drivers. 2️⃣ Sentenced to three years probation, 200 hours of community service, and a $50,000 fine by Judge William Orrick. 3️⃣ Speaking at Black Hat Europe 2023 after six years of silence, Sullivan discusses his legal battle and plans to share his story. 4️⃣ Sullivan felt vindicated by the judge's acknowledgment of the company's investigation quality and adherence to procedures. 5️⃣ Acknowledges his mistake in not involving third-party investigators during the breach handling, emphasizing the importance of transparency in such incidents. 6️⃣ Advises CISOs on the significance of disclosure and navigating responsibilities, welcoming new SEC incident reporting requirements to promote transparency. 7️⃣ Criticises the SEC's inconsistent approach, citing SolarWinds case charges contradicting the agency's intent to enforce new rules. 8️⃣ Notes similarities between his case and SolarWinds' CISO, Tim Brown, regarding personal accountability for company communication practices during security incidents. Read More 👉 https://lnkd.in/gsqpHYAM
Former Uber CISO Speaks Out, After 6 Years, on Data Breach, SolarWinds
darkreading.com
To view or add a comment, sign in
-
According to Michael Erlandson (pictured), VP of industry solutions at Vertafore, data hoarding can give threat actors more information to potentially hold a business to ransom. “It’s extremely important to be cognizant of how you’re storing this data and that it’s not just being haphazardly handled or put away in different areas a threat actor can take advantage of,” he said. “The more bait you give them, the more the cyber criminal can take advantage of, especially if that information is client-based, as it puts third parties in jeopardy.” #datahandling #databreaches #cyberattacks #cyberinsurance #brokersworkforyou
Why data hoarding can leave you more vulnerable to cyberattacks
insurancebusinessmag.com
To view or add a comment, sign in
-
OOOOOF. CrowdStrike. Claims made under 'Systems Failure" coverage could cost cyber insurers $1.5 BILLION. If you're at all interested in the quantitative side of risk and insurance, read this article
CrowdStrike Outage Could Cost Cyber Insurers $1.5 Billion
databreachtoday.com
To view or add a comment, sign in
-
There is a persistent threat to data security, and even those specializing in cybersecurity or aiding security incident victims are not immune. In March 2023, international law firm Orrick, Herrington & Sutcliffe was hit by a data breach, compromising the information of over 637,000 data breach victims. This includes those for whom they serve as legal counsel. The stolen data includes the victims’ names, birthdates, email addresses, and government-issued identification numbers. Online account credentials and credit or debit card numbers may also be included for other individuals. Learn what happened here: https://lnkd.in/gq2fWuD7
Law firm that handles data breaches was hit by data breach | TechCrunch
https://techcrunch.com
To view or add a comment, sign in
-
Penetration Testing, Cybersecurity Consulting | Making the Internet safer one website at a time | DM me for security questions or inquiries
"I think anything that pushes towards more transparency is a good thing" Really interesting article about Joe Sullivan, Uber's former CISO, and his plans to give his side of the story very soon. According to Sullivan, they followed their internal playbook to the letter - but they were still not transparent enough with people externally. Whatever you might think about the Uber case and Sullivan's position, I love his emphasis on transparency - both for incident response and for a security program in general. For incident response, transparency is critical to retaining trust after an incident. Talk about what you are doing, what you have found, and what you will still do. One of Okta's issues this week is that they claimed their investigation was over... only to disclose that more data was lost than originally thought. Afraid of sounding ignorant or admitting to a mistake? Don't be! If you need help, admit it. Get feedback where you need it. Pull in third party experts where you want it (and hopefully not just for CYA). Nobody is perfect or an expert in all matters and people will appreciate your honesty and transparency. (that is where those pesky incident response plans can be a big help too 😉 ) And the same goes for your security program. Be transparent with the organization. Help them understand why you want to implement the controls you think they need, why you want to take away their admin rights, and why restricting access to the Internet is a good idea. We are all on the same side working towards the same goal. And the more transparent we are about our side of things, the easier it is to work together towards that end. Do you agree with Sullivan in this case? What do you think the big takeaway from Uber's breach was? #security #cybersecurity #incidentresponse #databreach #uber #securityprofessionals https://lnkd.in/gb9uYWm9
Former Uber CISO Speaks Out, After 6 Years, on Data Breach, SolarWinds
darkreading.com
To view or add a comment, sign in
-
Data breaches are becoming increasingly common, with over 33 million people impacted in France alone due to recent breaches at Viamedis and Almerys. Unfortunately, this trend is set to continue and will far exceed 2023. As a company, it's essential to explore new partnerships and constantly improve your security measures. It's no longer a matter of if a breach will occur, but when. Some customers admit they thought they were doing enough, only to discover they were not. As CISOs, it's our duty to protect businesses and their customers, and we must review all options available. Let's work together to protect ourselves and our customers.
Data breaches at Viamedis and Almerys impact 33 million in France
bleepingcomputer.com
To view or add a comment, sign in
-
The OAIC filing against Medibank makes for some interesting, yet wholly unsurprising, reading. Yet another major breach attributed to stolen privileged credentials. The OAIC's reporting on their Notifiable Data Breaches (NDB) scheme continually tells us that stolen and compromised credentials are the number one entry point for attackers. In the second half of 2023 this accounted for more than half of all reported cyber incidents. Whilst there are many controls we can put in place to prevent this, strong Privileged Access Management is key. How do your administrators store and access privileged credentials, and how do you keep them out of the wrong hands? Reach out to me if you're looking for a solution in this space, always happy to talk about what I can do for you.
Australian Information Commissioner v Medibank Private Limited concise statement
oaic.gov.au
To view or add a comment, sign in
-
🚨 Notice of Filing: Australian Information Commissioner vs Medibank Private Limited 🚨 On June 14, 2024, a concise statement was lodged and accepted by the Federal Court of Australia. The case, titled "Australian Information Commissioner v Medibank Private Limited," addresses serious allegations concerning privacy breaches. The Australian Information Commissioner (AIC) alleges that Medibank failed to protect the personal information of approximately 9.7 million individuals, in contravention of the Privacy Act 1988. This failure resulted in unauthorised access and disclosure of sensitive personal information, including health data, during the period from March 12, 2021, to October 13, 2022. Key cybersecurity controls that were either not in place or failed to protect data include: Multi-Factor Authentication (MFA): Not implemented for remote access to critical systems. Privileged Access Management: Inadequate restriction and monitoring of privileged accounts. Password Management: Insufficient password complexity and monitoring. Security Monitoring and Incident Response: Poor handling of security alerts and incident escalation. Penetration Testing: Lack of regular and comprehensive testing of security controls. Contractor Assurance: Ineffective audits and oversight of third-party contractors. These are incredibly basic controls and, in the grand scheme of things, not hard to do. The AIC is not saying that Medibank should have rolled out a zero trust program or anything like that. Many of these controls can be rolled out across the environment as policy to enforce them, and others need policies that people can then work on implementing. A failure of one or two controls would be understandable. You could foresee MFA being rolled out across the environment, and one critical system being missed, for example. But this comprehensive failure is going to have dire consequences for Medibank Private, and is a wake up call to industries across Oceania. This is also evidence for a drum I've been beating for some time: PASSWORDS ARE MOST OFTEN TAKEN FROM BROWSERS. The days of Cobalt Strike and other malware dipping into LSASS as the most common method of obtaining passwords are behind us. Hackers figured out there was an easier way, take credentials from browsers. If you only take one thing away from this, take that! For more details, please refer to the official filing under the Federal Court of Australia, file number VID497/2024. https://lnkd.in/gkxU9y5N #CyberSecurity #DataPrivacy #LegalUpdate #Medibank #PrivacyAct #CyberAwareness #AIC #FederalCourtAustralia
Australian Information Commissioner v Medibank Private Limited concise statement
oaic.gov.au
To view or add a comment, sign in
-
(Cybersecurity Dive) Dive Brief: The insured losses connected to a global IT outage July 19, which a faulty CrowdStrike Falcon software update triggered, are expected to range between $300 million and $1 billion, according to a report released Friday from Guy Carpenter. 🔹 The losses would have likely been much larger had the incident been malicious, according to the report. A ransomware attack involving such a widely used technology system could have ranged from $600 million to $2 billion, according to the company, which is the reinsurance brokerage business under Marsh McClennan. 🔹 The insurance industry may need to reevaluate its perspective on potential risks and think less in terms of a single catastrophic “super cat” incident, but rather on the risk of mid-sized “kitty cat” incidents that take place on a more frequent, but smaller scale, Guy Carpenter said. 🔹 Download in Article (Guy Carp) https://lnkd.in/eEsEGtdv Vincent Guyaux Scott Smith Chad Ramberg #insurance #cyberinsurance #cyber #cybersecurity #insuranceindustry #crowdstrike #incident #insuredlossimpact #cyberprogram #cybersecurityprogram #regulations #regulatorycompliance #Buckler https://lnkd.in/e_9JjfgU
Insured loss impact could reach $1B following CrowdStrike outage
cybersecuritydive.com
To view or add a comment, sign in