Swati Nair reports: Infosys announced that its subsidiary, Infosys McCamish Systems (IMS), has reached an agreement with the US State of Vermont’s Department of Financial Regulation (DFR). This agreement, known as a stipulation and consent order, resolves issues related to a cyber incident without requiring a hearing. IMS is obligated to pay a USD 125,000…
Category: Breach Incidents
Obligations under Canada’s data breach notification law
Chiara Trinidad writes: What laws govern data breach in Canada? Data breach notification law is governed by the Personal Information and Electronic Documents Act (PIPEDA). This federal law regulates the handling of personal information during commercial transactions. This includes the collection, use, and disclosure of personal data. By extension, this also includes the storage of…
Avantic Medical Lab hacked; patient data leaked by Everest Group
On June 10, the Everest Group added a listing for Avantic Medical Lab to its leak site, accompanied by a one-week countdown clock and four screenshots containing patient information as proof of the claims. When the attack first occurred, and whether Everest had contacted Avantic before June 10, is unknown to DataBreaches, but on June…
Nigerian National Pleads Guilty to International Fraud Scheme that Defrauded Elderly U.S. Victims
It’s so hard to believe that people fall for these scams, but it happens so often that we need to just be more diligent about educating the public and reaching out to family members and friends to educate them — especially those who may not spend a lot of time on the internet to read…
Esse Health provides update about April cyberattack and notifies 263,601 people (1)
Update: Esse Health notified Maine that a total of 263,601 people were affected, but they notified HHS that 23,671 patients were affected. Esse Health has notified the Maine Attorney General’s Office that 263,601 people were affected by an incident they first disclosed in early May. Esse has 45 locations in and around the St. Louis…
Pembroke Regional Hospital reported canceling appointments due to service delays from “an incident”
On June 28, Pembroke Regional Hospital issued a press release. The Pembroke Observer reports: The Pembroke Regional Hospital (PRH) is currently experiencing service delays and has had to cancel certain appointments and procedures as a result of a cybersecurity incident that took place earlier this week. With the preliminary investigation complete, PRH President and CEO…