GRC Report Staff

The European Supervisory Authorities (ESAs) have unveiled a comprehensive set of policy products under the Digital Operational Resilience Act (DORA), marking a pivotal moment in the European Union's efforts to bolster the digital resilience of its financial sector. This extensive package, comprising technical standards and guidelines, represents a significant leap forward in harmonizing and strengthening the EU's approach to cybersecurity and operational risk management in finance.

The Wall Street Journal has reported that entertainment giant Disney is facing a significant data breach, with internal communications from its Slack workplace collaboration system leaked online. The breach, claimed by an anonymous hacking group called Nullbulge, reportedly includes discussions about ad campaigns, studio technology, and interview candidates.

As the financial services sector grapples with rapid technological change and emerging risks, New York's top financial regulator is stepping up its efforts to protect consumers and maintain market stability.

The European Commission has recently issued preliminary findings accusing X, formerly known as Twitter, of violating the Digital Services Act (DSA) in three key areas. The allegations, announced on Friday, focus on issues related to user interface design, advertising transparency, and data access for researchers.

A group of OpenAI whistleblowers have filed a complaint with the Securities and Exchange Commission (SEC), requesting an investigation into whether the ChatGPT maker's confidentiality agreements unlawfully prevent employees from speaking out about potential risks associated with its AI technologies.

Rite Aid Corporation announced today that it has fallen victim to a cybersecurity incident, potentially exposing personal information of customers who made purchases between June 6, 2017, and July 30, 2018. The pharmacy chain, currently trading over-the-counter following its Chapter 11 bankruptcy filing last year, is in the process of notifying affected individuals.

In a significant cybersecurity incident, AT&T has recently disclosed that customer data was illegally downloaded from a third-party cloud platform workspace in April. The telecommunications giant is now working closely with law enforcement to apprehend those responsible for the breach, with at least one person already in custody.