In July, 2020, cloud software firm Blackbaud announced that it had been the victim of a ransomware attack that began in February of 2020 and continued until Blackbaud was able to kick the attackers out of their system in May. In order to try to protect their clients from having personal and sensitive information on…
Category: Commentaries and Analyses
Experian says it is investigating if involved in Brazil data breach
Muvija M reports that the owner of a massive database with information on millions of Brazilians is still undetermined and under investigation: Credit data firm Experian said on Monday it was continuing to investigate whether the personal data of millions of people in Brazil that was found to be illegally offered for sale online could…
As predicted, big jump in RDP attacks as hackers target staff working from home
When everyone started working from home, one of the first predictions was that there would be more breaches related to the use of Remote Desktop Protocol (RDP). RDP is used by vendors or business associates to connect to their clients’ systems. As such, it’s a valuable tool, but left enabled instead of disabled, it provides…
Blockchain transactions confirm murky and interconnected ransomware scene
Catalin Cimpanu reports: A report published today by blockchain investigations firm Chainalysis confirms that cybercrime groups engaging in ransomware attacks don’t operate in their own bubbles but often switch ransomware suppliers (RaaS services) in a search for better profits. The report analyzed how Bitcoin funds were transferred from victims to criminal groups, and how the…
Terra Quantum AG Company Says It Found Weakness That Imperils Encryption
Ryan Gallagher reports: Security experts have long worried that advances in quantum computing could eventually make it easier to break encryption that protects the privacy of people’s data. That’s because these sophisticated machines can perform calculations at speeds impossible for conventional computers, potentially enabling them to crack codes previously thought indecipherable. Now, a Swiss technology…
The Eleventh U.S. Circuit Weighs in on Data Breach Standing Issues
Alfred Saikali of Shook, Hardy & Bacon L.L.P. writes: Yesterday, in a 26-page opinion, the 11th U.S. Circuit Court of Appeals has weighed in on two important questions in the world of privacy and data breach litigation. First, does a plaintiff have standing where he was exposed to a substantial risk of future identity theft, even…