“Shame Hacking” Liberal Groups — Is It Really Russian Hackers Doing It?

But it's the Russians! The ubiquitous Russians are at it again, or, so we are being told. You know, the Russian hackers who are everywhere, doing everything nefarious in the world, and victimizing poor little helpless "us" here in the United States . . . BREAKING!  Wikileaks: CIA 'Stole' Russian Malware, Uses It to ‘Misdirect Attribution’ …

Business Email Compromise Explained in Less than 4 Minutes (Video)

Here is a nice video from Trend Micro that provides a good overview of what is often referred to as the business email compromise: https://youtu.be/sxybmE1rrZg

Verizon Requires $350 Million Discount and Yahoo Share in Data Breach Liability — Good Deal?

UPDATE: Yahoo Shareholders Sue Over Massive Data Breaches (Law 360 paywall) Verizon and Yahoo have renegotiated their deal in the wake of Yahoo's revelations of its past data breaches. Verizon had agreed to pay $4.8 billion for Yahoo's Internet business in July 2016, but that was before Yahoo disclosed that it had two of the largest data …

David Beckham’s Exposed Emails Exemplify Shame Hacking Threat

Hackers have obtained David Beckham's embarrassing emails from his advisors in an extortion plot in which the advisors were told "pay up or we'll release emails," according to a recent news report. When the advisors refused to pay the £1million demand, the hackers released the emails. This is yet another example of what I call shame hacking, a topic …

Stolen Laptop + 3,800 PHI Records = $3.2 Millon Penalty

That's right, Children's Medical Center had 1 unencrypted laptop stolen that had protected health information (PHI) for 3800 patients. This stolen laptop was absolutely considered a data breach and resulted in a fine of $3.2 million.  Still think data breaches are not serious business?  Read more: Children’s Medical Center Pays Federal Fine Over Data Breach « …

3 Critical Cybersecurity Steps Your Company Must Take

I have presented at several cybersecurity conferences over the last few weeks and have had an opportunity to listen to and talk with some of the most highly regarded experts in this field. This includes experts from the FBI, Secret Service, private industry experts and many others. The message I have heard over and over …

Learn More About the NLJ’s Cybersecurity & Data Privacy Trailblazers for Data Privacy Day!

What better way is there to celebrate Data Privacy Day than by learning more about the most recent list of Cybersecurity & Data Privacy Law Trailblazers as published by the National Law Journal? If you are so inclined, here you go: Trailblazers!

Happy Data Privacy Day!

WHAT ARE YOU DOING TO OBSERVE IT? Today is Data Privacy Day! If you have been wondering “what is Data Privacy Day?” then this is your lucky day because not only is today Data Privacy Day, but here is the answer and an explanation for why it really matters to you and your company’s future …

ALERT: Prepare Your Company for the Season of W-2 Email Scams

UPDATED: SEE BELOW IRS 'Dirty Dozen' Tax Scams For 2017 Include ID Theft & Bogus Refunds Hunting season just began -- the season in which cybercriminals are hunting for W-2 information from your company. They do this by sending emails spoofing high-level executives, such as the company President or CEO, to lower level clerical personnel …

Improving Your Cybersecurity Plan, Explained by Paul Ferrillo in WSJ

The Wall Street Journal did an interview of my friend, collaborator, prolific author, and the the original Cyber Patriot, Paul Ferrillo to discuss how companies can make their cybersecurity plan better. Here is the full article: Making Your Cybersecurity Plan Better Paul and I are both firm believers in focusing on the basics so that …