Optus isn’t alone in trying to calm public nerves and find out what happened to cause a breach that exposed the records of 9.8 million current and former customers. Australian government agencies are also attempting to fight fires and reassure citizens their personal info is safe.
Cybersecurity
Posted inRegulatory Enforcement
Ex-Uber security chief found guilty of obstructing FTC data breach probe
Joseph Sullivan, the former chief security officer of Uber Technologies, was found guilty of two felonies connected to allegations he covered up a massive data breach at the ridesharing company and misled federal regulators about Uber’s response.
Posted inRegulatory Enforcement
NetWalker hacker imprisoned 20 years for ransomware attacks
Sebastien Vachon-Desjardins, a former Canadian government employee who played part in widespread NetWalker ransomware attacks, was sentenced to 20 years in prison and ordered to forfeit the $21.5 million U.S. investigators said he received from his victims.
Posted inData Privacy
Samsung facing class action alleging CCPA violations over data breaches
Samsung collected too much personal data from customers and failed to adequately secure it, leading to two data breaches this year and potentially millions of harmed individuals, a class-action lawsuit alleges.
Posted inEurope
Experts: EU Cyber Resilience Act puts pressure on tech developers, users
The EU’s proposed Cyber Resilience Act primarily puts pressure on tech manufacturers to ensure the cybersecurity of their products, but companies also have a duty of care to use the most secure products available.
Posted inRegulatory Enforcement
Morgan Stanley unit fined $35M for mishandling customer data
Morgan Stanley Smith Barney agreed to pay $35 million to settle Securities and Exchange Commission charges it repeatedly disregarded the safeguarding of clients’ personal data in decommissioning local storage devices.
Posted inRegulatory Enforcement
U.S. sanctions Iran intelligence ministry over Albania cyberattack
Iran’s minister of intelligence, together with its Ministry of Intelligence and Security, were sanctioned by the Treasury Department’s Office of Foreign Assets Control for malicious cyber activities that threaten the national security of the United States and its allies.
Posted inRisk Management
Details murky in Samsung’s second data breach this year
Samsung revealed a hacker accessed the personal data of an unspecified number of its U.S.-based customers, even after improving its cybersecurity systems following a previous breach earlier this year.
Posted inRisk Management
U.S., Israel finalize deal on cybersecurity cooperation
The United States and Israel have finalized an agreement to work together to protect the financial sector from cybersecurity attacks, the U.S. Treasury Department announced.
Posted inCybersecurity, Financial Services
Judge OKs Robinhood $20M data breach settlement
Online stock trading platform and broker-dealer Robinhood Financial moved closer to paying $20 million as part of a class-action settlement with thousands of customers whose accounts were allegedly accessed by unauthorized users.
