It ain’t over until…. well, no body-shaming here, but Target is not out of the woods on litigation from their massive 2013 breach. Law360 is reporting: The Eighth Circuit decided Wednesday to send back to lower court the $10 million deal that let Target Corp. out of multidistrict litigation over its notorious 2013 data breach,…
Category: Subcontractor
MN: PrimeWest Health notifies members of Summit Reinsurance incident
Another entity affected by the Summit Reinsurance ransomware attack in March, 2016 is first notifying individuals of the incident. See this report about PrimeWest Health. The insurer notified HHS of the incident on December 29, reporting that 2,441 members were affected. The reinsurer’s breach was discovered on August 8, 2016, and yet affected entities are…
Dutch Cops to Warn 20,000 of Email Account Hack
Phil Muncaster reports: Police in the Netherlands are set to email 20,000 possible fraud victims urging them to change their account details, after discovering their credentials had been stolen by a man arrested last year on suspicion of multiple cybercrime offences. Police revealed the arrest of the 35-year-old man last October. He was cuffed on suspicion of hacking, fraud…
2016: Healthcare data breaches in review, Part 2
This is the second part of a look-back at 2016 and a commentary on why we need to analyze breaches differently if we really want to become more proactive in preventing them. Part 1 of this article can be found here). To recap Part 1: although headlines tend to scream “HACK!” (and irritatingly show us stock images of…
Summit Reinsurance Services breach affected 19,000
The Summit Reinsurance Services ransomware breach, noted previously on this site, is beginning to attract more attention. First State Update reports: As a result of multiple consumer complaints, the Delaware Department of Insurance has been made aware of a security breach, involving Summit Reinsurance Services, Inc. (“SummitRe”) and BCS Financial Corporation, both subcontractors of Highmark…
Sg: Cellar Door, Web host fined over data protection breach after customer data appeared on Pastebin
K.C. Vijayan reports: The Cellar Door, a well-known local seller of gourmet products, has been fined $5,000 for failing to protect the personal data of some of its customers and users from being posted on another website without authorisation. Its website host, Global Interactive Works (GIW), was fined $3,000 by the Personal Data Protection Commission…