Category Archives: Data Breach

Understanding How Cyber Insurance Impacts Your Incident Response Planning (video of Shawn Tuma’s SecureWorld session)

In this SecureWorld session, Shawn Tuma teaches how cyber insurance impacts your incident response planning and why the two should work together, hand in hand. Listen Here: Article Page: Cyber Insurance and Incident Response: What to Know Talk Direct Link: https://youtu.be/wvEDCS-D1CY https://youtu.be/wvEDCS-D1CY

Shawn Tuma Provided Texas Bar Journal 2020 Cybersecurity & Data Privacy Update

Shawn Tuma provided the Texas Bar Journal’s 2020 year-end Cybersecurity & Data Privacy Update which addressed the following issues: online impersonation hacking laws authority of consent for search warrants and password protected devices ransomware attacks Read more here (LINK / PDF DOWNLOAD). Check out these articles: 2 Critical Cyber Insurance Issues All Companies Must Consider …

Continue reading “Shawn Tuma Provided Texas Bar Journal 2020 Cybersecurity & Data Privacy Update”

Podcast: Shawn Tuma Shares Real-Life Examples and Best Practices for Ransomware Incident Response

In this SecureWorld podcast, Shawn Tuma teaches about the ransomware attack lifecycle and complex incident response process with real-life examples and best practices. Listen Here: Podcast Page: https://www.secureworldexpo.com/resources/podcast-ransomware-attack-lifecycle Podcast Direct Link: https://html5-player.libsyn.com/embed/episode/id/18149138/height/90/theme/custom/thumbnail/yes/direction/backward/render-playlist/no/custom-color/000000/ Link to slides: https://www.slideshare.net/shawnetuma/lifecycle-responding-to-a-ransomware-attack-a-professional-breach-guides-perspective/shawnetuma/lifecycle-responding-to-a-ransomware-attack-a-professional-breach-guides-perspective Tell us what you think about it on LinkedIn here: https://html5-player.libsyn.com/embed/episode/id/18149138/height/90/theme/custom/thumbnail/yes/direction/backward/render-playlist/no/custom-color/000000/ https://www.slideshare.net/shawnetuma/lifecycle-responding-to-a-ransomware-attack-a-professional-breach-guides-perspective/shawnetuma/lifecycle-responding-to-a-ransomware-attack-a-professional-breach-guides-perspective

The Art of Cybersecurity: How Sun Tzu Masterminded the FireEye / US Agencies / SolarWinds Cyberattacks

Sun Tzu taught that, when it comes to the art of cybersecurity, you must be wary of your business partners and other third parties. Why?Unless you are living under a rock, you should have heard that FireEye–perhaps the preeminent cybersecurity firm on the face of the planet–was the victim of a successful cyberattack. So were …

Continue reading “The Art of Cybersecurity: How Sun Tzu Masterminded the FireEye / US Agencies / SolarWinds Cyberattacks”

Simple Mistakes – Not Always “The Hackers” – Can Cause Substantial Data Breaches

It is not always the feared and dreaded “hackers” that cause the exposure and breach of confidentiality of sensitive personal information. Sometimes it’s just simple mistakes, but the consequences can be much the same. Consider this situation: NTreatment inadvertently exposed thousands of medical records online by neglecting to add password protection to one of its …

Continue reading “Simple Mistakes – Not Always “The Hackers” – Can Cause Substantial Data Breaches”

The Home Depot / State Attorneys General Settlement – My 1st and 2nd Thoughts

The Attorneys General of 46 states reached a $17.5 million-dollar settlement with The Home Depot, which was announced on November 24, 2020. Texas Attorney General Ken Paxton announced that this settlement was led by the Connecticut, Illinois, and Texas AGs and Texas will collect $1,777,440.00. I will have more to say about this settlement in …

Continue reading “The Home Depot / State Attorneys General Settlement – My 1st and 2nd Thoughts”

Podcast: #DtSR Episode 410 – TPA CISO Accountability Problems

I was a guest recently on the Down the Security Rabbithole Podcast with Raf Los, James Jardine, and Brandon Dunlap for episode 410 titled TPA CISO Accountability Problems. As they described it: Because we can’t get enough of Brandon Dunlap and Shawn Tuma over here on the podcast, here we go again. Last episode Brandon …

Continue reading “Podcast: #DtSR Episode 410 – TPA CISO Accountability Problems”

Podcast: #DtSR Episode 408 – Shawn Tuma Cyber Superhero :)

I was a guest recently on the Down the Security Rabbithole Podcast with my good friends Raf Los and James Jardine who cleverly (and, kindly) titled this episode “Shawn Tuma Cyber Superhero” — thanks, guys! Anyway … as they described it: This week, on episode 408 Shawn Tuma joins us again to talk about the …

Continue reading “Podcast: #DtSR Episode 408 – Shawn Tuma Cyber Superhero :)”

What Can Happen if You Do Not Notify Following a Data Breach?

Here is one of the questions we get asked most often: “Ok, so we’ve had a real data breach and you say we have clear notification obligations, what can happen if we just ignore it and pretend it never happened — that is, we just don’t notify?” Unfortunately, this question is oftentimes coupled with this …

Continue reading “What Can Happen if You Do Not Notify Following a Data Breach?”

Texas Bar Journal 2019 Cybersecurity & Data Privacy Update

The Texas Bar Journal’s 2019 year-end Cybersecurity & Data Privacy Update was once again provided by Shawn Tuma and addressed the following issues: Texas’ New Data Breach Notification Requirements effective January 1, 2020 Whether website scraping allegations are sufficient to invoke Texas and federal “hacking” laws Whether viewing pictures on another’s cellphone violates Texas “hacking” law Cyber …

Continue reading “Texas Bar Journal 2019 Cybersecurity & Data Privacy Update”