Topic
Ransomware
1,101 published works
Internet, IT & e-Discovery
Any surprise that Ransomware against healthcare and manufacturing is on the rise?
By Peter Vogel
SCMagazine.com reported that “According to the Sophos State of Ransomware Report 2024 (https://www.sophos.com/en-us/content/state-of-ransomware), while most industries reported a decline in ransomware attacks, healthcare and manufacturing stood out as notable exceptions.” …
Cybersecurity Lawyer Forum
To Pay or Not to Pay – There Isn’t a Question
Every ransomware attack requires the victims to make a hard decision – whether or not to pay the ransom. The decision is often made on the basis of past mistakes…
Data Privacy + Cybersecurity Insider
CISA Issues Advisory on Black Basta Ransomware
On May 10, 2024, CISA, along with the FBI, HHS, and MS-ISAC, issued a joint Cybersecurity Advisory relating to Black Basta ransomware affiliates “that have targeted over 500 private industry…
RopesDataPhiles
New Cross-Sector 72 Hour Data Breach Requirements for Critical Infrastructure
By Edward McNicholas, Kate Kaplan, Jake Barr
The Cybersecurity and Infrastructure Security Agency (CISA) has issued its Notice of Proposed Rulemaking (NPRM) to establish the first cross-sectoral federal cybersecurity incident and ransomware payment reporting system. As noted…
Media & Privacy Risk Report
Breach Response: Is 72 hours the new 30 days?
By Bryan K. Clark, Blaine C. Kimrey
For years, we were able to tell most clients experiencing a potential data security incident that they likely had at least 30 days to notify any third parties about the…
Privacy Matters
US CIRCIA Update: CISA Proposed Regulations Released
By John Gevertz, Chelsea Rissmiller
This month, the Department of Homeland Security (“DHS”) Cybersecurity and Infrastructure Security Agency (“CISA”) released its long-awaited proposed draft regulations pursuant to the Cyber Incident Reporting for Critical Infrastructure Act…
Internet, IT & e-Discovery
$22M Ransomware Payment apparently stolen from UnitedHealth Group!
By Peter Vogel
SCMagazine.com reported that “A $22 million ransom payment allegedly made by Optum, which is supported by blockchain transaction records associated with ALPHV/BlackCat, was apparently stolen by the ransomware-as-a-service (RaaS) in…
Inside Privacy
CISA Issues Notice of Proposed Rulemaking for Critical Infrastructure Cybersecurity Incident Reporting
By Ashden Fein, Micaela McMurrough, Caleb Skeath, Robert Huffman, Susan B. Cassidy, Shayan Karbassi, John Webster Leslie
On March 27, 2024, the U.S. Cybersecurity and Infrastructure Security Agency’s (“CISA”) Notice of Proposed Rulemaking (“Proposed Rule”) related to the Cyber Incident Reporting for Critical Infrastructure Act of 2022…
Insurance
NAIC Cybersecurity Working Group Adds Cyber Coverage to its Focus
By Daniel Barry
Over the last few years, the work of the Cybersecurity (H) Working Group of the National Association of Insurance Commissioners (“NAIC”) has focused on cybersecurity risk to insurance licensees such…
Security, Privacy and the Law
Change Healthcare Cyberattack: Actionable Next Steps for Impacted Entities
By Colin Zick
Key Takeaways: Change Healthcare, a healthcare technology company owned by UnitedHealth Group, has been impacted by a ransomware attack, so its services have been shut down. Patients and providers have…