The Securities and Exchange Commission has adopted amendments to Regulation S-P aimed at strengthening protections for consumers' personal financial information held by broker-dealers, investment companies, registered investment advisers, and transfer agents.
Nissan Motor Corporation has revealed that a recent cybersecurity breach has exposed the Social Security Numbers (SSNs) of thousands of its employees. The company disclosed the breach in a letter sent to affected employees yesterday, outlining the measures being taken to address the situation and offering support to mitigate potential impacts.
Ascension, one of the largest nonprofit health systems in the United States, is dealing with significant disruptions after detecting a cybersecurity incident this week. The Catholic health care organization, which operates 140 hospitals across 19 states and Washington D.C., announced on Wednesday that it had identified "unusual activity" impacting some of its technology network systems.
Finland's data protection authority has imposed an €856,000 fine on e-commerce company Verkkokauppa.com for violating the GDPR by failing to define retention periods for customer account data and requiring users to register accounts to make online purchases.
Hellenic Post Services S.A. (ELTA S.A.), a prominent postal service provider in Greece, has been fined by the Hellenic Supervisory Authority (SA) for failing to implement adequate technical and organizational measures, leading to unauthorized access by third parties and subsequent data breaches. The final decision, issued on February 28, 2024, highlights critical lapses in compliance with GDPR principles regarding the integrity and confidentiality of personal data and the security of processing.
Insight Global LLC, a prominent staffing firm headquartered in Atlanta, has reached a $2.7 million settlement to resolve allegations of violating the False Claims Act due to inadequate cybersecurity measures during COVID-19 contact tracing efforts. The settlement, announced by the Department of Justice (DOJ), marks a significant step in ensuring government contractors fulfill their cybersecurity obligations, particularly in handling sensitive health information.
Kaiser Permanente, one of the nation's largest not-for-profit health plans, has disclosed a major data breach impacting the personal information of 13.4 million members.