#information-security

#information-security

The cyberattack on Change Healthcare systems impacted a substantial number of Americans, with uncertainty about the exact extent of the breach. [ more ]

Fairway Independent Mortgage Corp. suffered a cyber attack due to vulnerabilities in a vendor system.

The company engaged a third-party security firm to assist in identifying impacted customers and promptly implemented a patch to rectify the vulnerability. [ more ]

Criminals broke into Southern Water's IT systems and stole a limited amount of data.

The stolen data includes identity documents, HR-related documents, and corporate car-leasing documents. [ more ]

Finham Park Multi Academy Trust in Coventry has been reprimanded by the Information Commissioners Office for data breaches.

The school's IT system was hacked three times and 1,843 UK Data Subjects were affected.

The ICO found that the school did not have adequate account lockout or password policies in place. [ more ]

Freddie Mac is urging seller/servicers to prioritize cybersecurity and maintain robust information security programs to prevent and mitigate the impact of cyber incidents.

Record numbers of cybersecurity incidents against seller/servicers occurred in 2023, including social engineering attacks and the installation of malware and ransomware. [ more ]

Only 8 out of 23 surveyed civilian agencies were found to have effective information security programs in place.

Various causes for the ineffective programs were identified, including management accountability issues and gaps in standards and quality control. [ more ]

Sen. Catherine Cortez Masto reintroduced three bills aimed at adding oversight and transparency to private sector data collection.

The bills address information security standards, data collection practices, software distribution, and privacy-enhancing technologies.

Cortez Masto emphasizes the need for stronger privacy laws to protect consumers' personal information. [ more ]

The Inns of Court College of Advocacy (ICCA), a leading college for barristers, experienced a data breach that allowed students to access sensitive files on hundreds of other students.

The breach exposed personal information such as email addresses, phone numbers, exam marks, previous institutions attended, ID photos, and sensitive data like health records, visa status, and parental status.

The college is investigating the breach and has notified the Information Commissioner's Office. They have also sought written undertakings from the students who accessed the files to not share the data further. [ more ]