Breach

A very labor-friendly job market, and upper management's growing understanding of the challenges facing cyber professionals, are both key reasons.

While there are other cyber provisions in the NDAA, a long-touted incident notification rule, requiring some victims of breaches to alert the federal government within a few days of noticing, was not included.

It is common for security teams to forget that chats and email accounts that live on breached networks will no longer be secure, a variety of breach responders, negotiators, and preparation consultants told SC Media.

This week’s roundup is led by a ransomware-related data exfiltration incident at Planned Parenthood LA, joining a number of other reported data theft and hacking incidents.

A patient recently filed a lawsuit against ReproSource Fertility Diagnostics over alleged security failings that led a healthcare data breach impacting 350,000 patients.

An unauthorized third party dwelled inside GoDaddy’s Managed WordPress network for two months via a compromised password. SSL private keys were also exposed.

Service providers also required to report to a bank official if an incident disrupts or degrades the bank for four or more hours.

This week’s roundup is led by a months-long hack and data theft of Sea Mar Community Health and includes a number of HIPAA-compliance concerns with delayed notifications.