GRC Report Staff

UnitedHealth Confirms 190 Million Americans Hit by Historic Change Healthcare Data Breach

UnitedHealth has recently confirmed that the February 2024 ransomware attack on its subsidiary, Change Healthcare, compromised the sensitive personal and medical information of approximately 190 million individuals—nearly double the initial estimates. This breach now ranks as the largest medical data breach in U.S. history.

A New Era at the CFTC: Acting Chair Caroline Pham Ushers in Leadership Changes

Change is in the air at the Commodity Futures Trading Commission (CFTC). With the arrival of a new administration, Acting Chair Caroline Pham has wasted no time in setting the tone for her tenure, announcing sweeping leadership updates across the agency.

UBS Pays $1.1 Million Fine for Misreporting Millions of Trades

In a settlement with the Financial Industry Regulatory Authority (FINRA), UBS Financial Services Inc. (UBS FSI) agreed to a $1.1 million fine and a censure following a six-year span of inaccurate trade data submissions that affected more than 4.4 million transactions.

Danske Bank Faces $4.4 Million Fine for Market Manipulation

In a move against one of Scandinavia’s banking giants, Norway's Finanstilsynet has fined Danske Bank approximately $4.4 million (NOK 50 million) for market manipulation tied to a high-stakes government bond issuance in early 2023. The penalty underscores the seriousness of tampering with market benchmarks, particularly when taxpayer dollars are on the line.

Trump Tosses Biden’s Executive Order on AI Risk

In a decision that demonstrates the deepening philosophical divide over regulation and the future of artificial intelligence (AI), President Donald Trump has overturned a key executive order issued by former President Joe Biden. The order, signed in 2023, sought to address AI risks head-on by mandating safety tests for high-risk AI systems before they hit the market.

ENISA's Prescription for a Healthier Cybersecurity Future

In a move as timely as a life-saving intervention, the European Union Agency for Cybersecurity, ENISA, has set its sights on strengthening the digital defenses of Europe's healthcare systems. With hospitals and healthcare providers increasingly targeted by cyberattacks, the European Commission's proposed Action Plan for Healthcare Cybersecurity couldn’t be more urgent. ENISA has pledged to collaborate with Member States, healthcare providers, and the wider cybersecurity community to address this pressing challenge.

Germany Advocates for CSRD Reporting Delays & Simplifications Ahead of Federal Elections

Germany has thrown its hat into the sustainability ring—though not quite in the way Brussels might have hoped. Just weeks before a pivotal federal election, and amid the collapse of its coalition government, Berlin is calling for a major rethink of the EU’s Corporate Sustainability Reporting Directive (CSRD). The proposals aim to give smaller companies a two-year reprieve from sustainability reporting requirements and eliminate sector-specific obligations entirely.