Popular, Risk Management, Cyber Attacks

NYDFS Issues Guidance on Cybersecurity Risks Arising from Artificial Intelligence

Cozen O'Connor on 10/25/2024

On October 16, 2024, the New York Department of Financial Services (NYDFS) issued an Industry Letter that discusses the cybersecurity risks associated with the use of artificial intelligence (AI) and outlines strategies to...more

National Public Data Hack Exposes Millions: Essential Steps to Safeguard Your Identity and Combat Fraud

Foley & Lardner LLP on 8/26/2024

The recent massive data breach at National Public Data (NPD), a background check company, has potentially compromised the personal information of millions, if not billions, of individuals, including their Social Security...more

Cybercrime Trends: A Midyear Review

Dorsey & Whitney LLP on 7/25/2024

Cybercriminals continue to outpace the best efforts of regulators, law enforcement, and cybersecurity professionals. Recent reporting from the Federal Bureau of Investigation demonstrates that cybercriminals are increasingly...more

What Goes Around Comes Around: The Resurgence of Data Breach Class Actions

Foley & Lardner LLP on 7/23/2024

Data breach class actions are again on the rise, with a recent report by Lex Machina confirming what many cybersecurity practitioners have seen first-hand over the last two years. The findings also reaffirm longstanding best...more

The Growing Cyber Risks in Fintech and How to Mitigate Them

Woodruff Sawyer on 6/10/2024

The fintech revolution has reshaped the financial world, creating new opportunities to borrow, save, transact, and invest like never before. With no signs of slowing, fintech revenues are projected to grow sixfold from $245...more

Cyber Resilience After the Change Healthcare Breach

Fenwick & West LLP on 5/6/2024

More than two months after the February 2024 Change Healthcare cyber-ransom attack, the healthcare industry continues to grapple with the fallout, creating significant challenges, disruptions, and outages to the healthcare...more

Immediate vs. Slow Burn Risks: A Balanced Cybersecurity Strategy

NAVEX on 4/25/2024

The consequences of a cyberattack can be catastrophic, as we saw in the previous blog of this series. Cybersecurity is a business-wide responsibility that demands a proactive strategy extending far beyond technical solutions...more

Recent Ransomware Attacks Highlight the Evolving Challenges in Responding to Cyber Extortion

Patterson Belknap Webb & Tyler LLP on 4/23/2024

A spate of recent ransomware attacks illustrates the increasingly difficult calculations that businesses face following the theft or encryption of their data....more

Hackers Increasingly Leveraging Threats to Patients to Pressure Health Organizations to Pay Ransom

Health Care Compliance Association (HCCA) on 4/22/2024

Cyberhackers—potentially frustrated by their limited ability to extort ransom from health care entities in attacks—have started extorting the patients themselves, threatening them with the release of information or...more

[Webinar] Navigating Risk After the Change Healthcare Cyberattack: Strategies for Effective Healthcare Third Party Risk Management...

Clark Hill PLC on 3/27/2024

In an increasingly interconnected healthcare landscape, third party relationships play a critical role in operations, but they also introduce significant risk. To address this challenge, our webinar delves into the...more

Privacy Briefs: March 2024

Health Care Compliance Association (HCCA) on 3/12/2024

Research from Guidepoint Security found that 2023 saw an 80% increase in ransomware activity year-over-year, driven in part by multiple mass exploitation campaigns impacting hundreds of organizations. In total, the report...more

HHS Cybersecurity Performance Goals and the Healthcare Industry

Spilman Thomas & Battle, PLLC on 3/8/2024

The healthcare industry is a major target for cyberattacks because of all of the personal information collected from patients. Recognizing that the healthcare industry is such a ripe hunting ground for cybercriminals, the...more

NIST Extends its Cybersecurity Framework to Cover Evolving Threats and Governance

Jones Day on 3/8/2024

The National Institute of Standards and Technology ("NIST") released a significant update to its framework, expanding its scope and reach to cover a broader audience and evolving cybersecurity risks and management issues....more

HHS’ Civil Rights Office Reaches Second-Ever Ransomware Settlement

Paul Hastings LLP on 3/5/2024

The Department of Health and Human Services (HHS), Office for Civil Rights (OCR) recently announced a settlement under the Health Insurance Portability and Accountability Act (HIPAA) with Green Ridge Behavioral Health, LLC...more

CSF 2.0 – An Expanded Cybersecurity Framework for all Organizations

Porter Hedges LLP on 3/4/2024

Cybersecurity compliance, governance, and disclosure practices have evolved significantly over the past decade. As we have noted in prior blog posts, the U.S. Securities and Exchange Commission is requiring cybersecurity...more

Top 10 Issues General Counsel Need to Know About Ransomware in 2024

Alston & Bird on 2/26/2024

Threat actors are evolving. Our Privacy, Cyber & Data Strategy Team explains how ransomware gangs have changed their tactics and how companies can respond to the threat while navigating new scrutiny from investors and...more

2024 J.S. Held Global Risk Report: New Laws Addressing the Risks and Rewards of Artificial Intelligence (AI)

J.S. Held on 2/15/2024

The race to develop AI and calls to regulate it are heating up around the world. In November 2023, 28 countries, including the United States, United Kingdom, China, and the European Union, met and pledged to work together to...more

Critical Infrastructure Organizations Warned to Upgrade Systems and Software

Nossaman LLP on 2/9/2024

In one of the most clear-eyed and sobering assessments of the cyberthreat China poses to our nation’s critical infrastructure, the country’s foremost cybersecurity leaders recently testified that the Chinese Communist Party...more

National Cyber Security Centre Forecasts Upcoming Cyber Threats with AI Use for Attacks

Alston & Bird on 1/30/2024

On January 24, 2024, the U.K.’s National Cyber Security Centre (NCSC) released a new report, The near-term impact of AI on the cyber threat, detailing how Artificial Intelligence (AI) will impact the effectiveness of cyber...more

The SEC Raises the Stakes: New Cybersecurity Rules for Publicly Traded Companies Hit the Books in 2023

Polsinelli on 1/25/2024

In 2023, the U.S. Securities and Exchange Commission (“SEC”) issued its now-fully implemented Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule. The Rule reflects the reality that cybersecurity...more

Privacy Breach: The Silent Killer of Startups

Pillsbury - Propel on 1/23/2024

A privacy breach can have detrimental consequences for startups: A privacy breach may trigger legal consequences and regulatory scrutiny, especially for a startup that operates in areas with stringent data protection laws...more

[Webinar] Practical Advice on the SEC Rule: Cybersecurity Incidents and Risk Management Disclosures - January 25th, 10:00 am PT

Clark Hill PLC on 1/19/2024

Are you prepared for the new SEC Rule on Cybersecurity Incident and Risk Management Disclosures? Don't let your business get caught off guard! This webinar will cover important points about the rule and how to effectively...more

Today's Popular Updates › Risk Management › Cyber Attacks