Today was not a good day for hospitals in Massachusetts. First, we saw the state’s attorney general announce a settlement between the state and UMass Memorial Healthcare and UMass Memorial Medical Centers involving insider breaches for fraudulent purposes. And now we see this announcement from the federal regulator, OCR: Today, the Department of Health and…
Month: September 2018
House Financial Services Committee passes R.6743
Aaron Lancaster of BakerHostetler has a great privacy rewind for the week that includes action in Congress. He writes: House Committee Passes Federal Data Breach Notification Bill for Financial Institutions The House Financial Services Committee passed R. 6743, the Consumer Information Notification Requirement Act, which would require financial institutions to notify affected customers of a data…
UMass Memorial Health Care Entities to Pay $230,000 to Resolve Massachusetts AG’s Lawsuit Over Data Breaches
From the Office of Attorney General Maura Healey, an announcement of a settlement in the wake of insider breaches: BOSTON — UMass Memorial Medical Group Inc. and UMass Memorial Medical Center Inc. will pay a total of $230,000 to resolve claims that two separate data breaches exposed the personal and health information of more than…
Credit reference agency Equifax fined for security breach
From the Information Commissioner’s Office: The Information Commissioner’s Office (ICO) issued Equifax Ltd with a £500,000 fine for failing to protect the personal information of up to 15 million UK citizens during a cyber attack in 2017. The incident, which happened between 13 May and 30 July 2017 in the US, affected 146 million customers globally….
US military given more authority to launch preventative cyberattacks
From the what-could-possibly-go-wrong dept., Jose Pagliery and Ryan Browne report: The US military is taking a more aggressive stance against foreign government hackers who are targeting the US and is being granted more authority to launch preventative cyberstrikes, according to a summary of the Department of Defense’s new Cyber Strategy. The Pentagon is referring to…
Update: Suspect Arrested for Huazhu Hotel’s Over USD50,000 User Data Theft
Xu Wei report: A hacker who disclosed nearly 500 million pieces of Chinese Huazhu Hotels Group’s user data, including bank accounts and identity cards, has been detained. The transaction that the suspect who tried to sell the data on the dark net has failed, the Shanghai-based hotel firm said on its website on Sept. 17. The person…