DataBreaches really and truly does not understand how entities can take so long to investigate some breaches before disclosing them. If HHS feels that seven months from the first detection of an attack to notification is reasonable or acceptable, then let it change the regulations. If it is not acceptable and HHS wants entities to…
Category: Malware
Associated Eye Care Partners, LLC discloses vendor breach. Can you guess which vendor?
One of the breach notices that showed up in routine searches this morning was from Associated Eye Care Partners, LLC (“AEC”). The first sentence of the notification letter was: We are contacting you to inform you of a data incident experienced by a third-party vendor for Associated Eye Care Partners, LLC (“AEC”). My mind…
Health Aid of Ohio settles class action lawsuit stemming from 2021 ransomware attack
There’s one thing I am sure of: even if I fail to cover some breaches on this site, class action lawyers will still be busy suing entities. Top Class Actions reports a settlement in a suit involving a Health Aid of Ohio breach in February of last year. Although not reported on this site at…
The Norwegian SA issues fine to the Municipality of Østre Toten for flawed information security
Seen on the website of the European Data Protection Board, a decision by Norway’s data protection regulator imposed a 400,000 Eur fine (NOK 4 million) on a municipality that suffered a ransomware attack. The Norwegian Supervisory Authority found that the municipality’s security for personal data was seriously flawed and inadequate. Summary of the Decision Origin…
UK: ICO and NCSC stand together against ransomware payments being made
A joint letter addressed to the Law Society and signed by the U.K.’s Information Commissioner’s Office and NCSC is causing waves in cybersecurity circles. The following is the press release accompanying it: July 8 – Solicitors are today being asked to play their part in keeping the UK safe online by helping to tackle the…
UK: Hackers have access to bank details, signatures, addresses and national insurance numbers, Gloucester councillor reveals
Carmelo Garcia reports: People in Gloucester have had their signatures, addresses, national insurance numbers, bank details and driving licences accessed by hackers, a councillor has revealed. Many local people’s lives were thrown into disarray in December when council services were disrupted by a major cyber attack. House sales, benefit payments and planning applications were all delayed after hackers compromised…