Edward Fitzpatrick reports: Attorney General Peter F. Neronha’s office has issued administrative subpoenas to the Rhode Island Public Transit Authority and UnitedHealthcare over a data breach that compromised the personal information of 22,000 people. The subpoenas, or civil investigative demand letters, say the attorney general’s office was notified on Dec. 23 of a “significant information…
Category: Commentaries and Analyses
NY State Comptroller DiNapoli Releases School District Audits
Arkport Central School District – Network Access Controls (2021M-162) January 28, 2022 Quick Facts about the District: Enabled Network User Accounts Student 489 Non-Student 259 Total 748 IT Vendor Contract Services 2021 Expenditures $602,824 Audit Period July 1, 2020 – September 21, 2021 Audit Objective Determine whether Arkport Central School District (District) officials ensured network…
North Korea Hacked Him. So He Took Down Its Internet
What a great — and thought-provoking — story by Andy Greenberg: For the past two weeks, observers of North Korea’s strange and tightly restricted corner of the internet began to notice that the country seemed to be dealing with some serious connectivity problems. On several different days, practically all of its websites—the notoriously isolated nation…
1 in 7 Ransomware Extortion Attacks Leak Critical Operational Technology Info — Mandiant
Daniel Kapellmann Zafra, Corey Hidelbrandt, Nathan Brubaker, and Keith Lunden of Mandiant write: Data leaks have always been a concern for organizations. The exposure of sensitive information can result in damage to reputation, legal penalties, loss of intellectual property, and even impact the privacy of employees and customers. However, there is little research about the…
Inside Trickbot, Russia’s Notorious Ransomware Gang
Matt Burgess reports: WHEN THE PHONES and computer networks went down at Ridgeview Medical Center’s three hospitals on October 24, 2020, the medical group resorted to a Facebook post to warn its patients about the disruption. One local volunteer-run fire department said ambulances were being diverted to other hospitals; officials reported patients and staff were safe. The downtime at the Minnesota medical…
Mobile phone operator Cosmote and parent company OTE fined by Hellenic DPA over 2020 data breach slapped with fine over data breach
Ekathimerini reports: Mobile phone operator Cosmote and parent company OTE have been slapped with fines of over 9 million euros by Greece’s Data Protection Authority over a breach of user records in September 2020. Specifically, the watchdog fined Cosmote 6 million euros for failing to protect a file containing the call histories of thousands of…