The other day, Joseph Lorenzo Hall, PhD commented on Twitter about how doing notifications of breaches or leaks is a pretty thankless job. And it often is. Yesterday and today, however, I feel pretty good about the time I spent trying to make two notifications. The first “it was worth it afterall” experience involved a…
New York Launches Cybersecurity Unit
Kade N. Olsen, Michael F. Buchanan and Craig A. Newman of Patterson Belknap write: Today, New York’s top financial regulator, the Department of Financial Services, announced the formation of a dedicated “Cybersecurity Division.” In a news release issued earlier today, the agency said the new division “will focus on protecting consumers and industries from cyber…
Lower fines for firms that admit role in data breach
Hariz Baharudin reports: Organisations that admit their role in a data breach and plead guilty to it may get a lower financial penalty from the privacy watchdog if the cause is a common breach. Common breaches include URL manipulation, poor password management or printing errors resulting in incorrect recipients. The Personal Data Protection Commission (PDPC)…
Redtail CRM Data Breach May Have Exposed FA Client Info
Financial Advisor IQ reports: Some financial advisors using Redtail Technology’s client relationship management software may have had their clients’ personal data exposed on the internet, according to news reports. Redtail told affected advisors in an email that it learned on March 4 about a data breach that led to its logging systems capturing some investor…
‘The college won’t tell us anything’: After data breach, Augustana College alumni are demanding answers
As we know, incident response and notification dsn’t always go smoothly, and people may be increasingly frustrated by the lack of information they can obtain.
Georgia Supreme Court Clarifies There Is No Duty to Safeguard Personal Information from a Data Breach
Gavin Reinke of Alston & Bird writes: The Georgia Supreme Court recently issued a decision holding that there is no duty to safeguard personal information from a data breach under Georgia law. Georgia Department of Labor v. McConnell involved the accidental disclosure of a spreadsheet that contained the name, social security number, home telephone number,…