One of the breach notices that showed up in routine searches this morning was from Associated Eye Care Partners, LLC (“AEC”). The first sentence of the notification letter was: We are contacting you to inform you of a data incident experienced by a third-party vendor for Associated Eye Care Partners, LLC (“AEC”). My mind…
Category: Commentaries and Analyses
The Norwegian SA issues fine to the Municipality of Østre Toten for flawed information security
Seen on the website of the European Data Protection Board, a decision by Norway’s data protection regulator imposed a 400,000 Eur fine (NOK 4 million) on a municipality that suffered a ransomware attack. The Norwegian Supervisory Authority found that the municipality’s security for personal data was seriously flawed and inadequate. Summary of the Decision Origin…
UK: ICO and NCSC stand together against ransomware payments being made
A joint letter addressed to the Law Society and signed by the U.K.’s Information Commissioner’s Office and NCSC is causing waves in cybersecurity circles. The following is the press release accompanying it: July 8 – Solicitors are today being asked to play their part in keeping the UK safe online by helping to tackle the…
Ca: How the court bolstered an insurer’s exclusion for privacy breach
David Gambrill reports: Acting recklessly in breaching the confidential medical files of patients effectively falls within a hospital insurer’s commercial policy exclusion for committing an ‘intentional act,’ Ontario’s top court has ruled. The Ontario Court of Appeal found a hospital insurer, the Healthcare Insurance Reciprocal of Canada, does not have a duty to defend a…
A community health provider in Vermont and an addiction rehab organization in Pennsylvania fall prey to BlackByte
Two medical entities appear to have recently fallen prey to attacks using BlackByte’s ransomware, and both entities have now had some of their data leaked on BlackByte’s dedicated leak site. Lamoille Health Partners Lamoille Health Partners in Vermont serves the Lamoille County community’s healthcare needs. As such, they provide a range of comprehensive services that…
SiegedSec continues #OpJane efforts
On June 26, DataBreaches reported that hacktivists calling themselves SiegedSec claimed to have attacked government servers in Arkansas and Kentucky to protest those states’ abortion bans. As noted at the time, the “attacks” seemed mostly symbolic, as neither server contained any information related to the abortion issue or laws and was all publicly available. Yesterday,…