Cyware reports: The Australian Catholic University has suffered a fresh wave of cyberattack that resulted in the compromise of personal details of its staff. This is the second significant security breach that has occurred in a month at one of the country’s tertiary institutions. Read more on Cyware.
Thanks to Equifax breach, 4 US agencies don’t properly verify your data, GAO finds
Alfred Ng reports: Multiple government agencies are relying on a security measure that can be easily bypassed thanks to massive breaches like the Equifax hack, the US Government Accountability Office has found. In a report released Friday, the government watchdog group found that the US Postal Service, the Department of Veterans Affairs, the Social Security…
CO: Hit by ransomware, Estes Park Health decides to pay the ransom to get decryption keys
Zach Clemens reports that Estes Park Health suffered a ransomware attack on June 2. No data was exfiltrated, but it was locked up, and after consulting with their cyberinsurer and IT people, they decided that they had to pay the ransom. “At that point in time we are looking at the patients we have internally,…
Three U.S. Universities Disclose Data Breaches Over Two-Day Span
Sergiu Gatlan reports: Three U.S. universities have disclosed data breach incidents impacting personally identifiable information of students or employees following unauthorized access to some of their employees’ email accounts. All three universities — Graceland University, Oregon State University, and Missouri Southern State University — have notified the individuals whose personal information was potentially stolen or…
OH: N.E.O. Urology pays attackers $75,000 after ransomware attack
Corey Vallas reports N.E.O. Urology in Boardman, Ohio paid attackers $75,000 after their computer systems were encrypted by ransomware. Police say the fax listed “Pay4Day.io” as the contact for further information. Read more on WFMJ. There is no notice on the medical practice’s web site as of the time of this posting, but it’s interesting…
Maryland Amends Data Breach Law
Hunton Andrews Kurth writes: Maryland Governor Larry Hogan recently signed into law House Bill 1154 (the “Bill”), which amends the state’s data breach notification law. Among other obligations, the amendments expand the required actions a business must take after becoming aware of a data security breach. Under the existing data breach notification law, a business…