INTERIM. Regulatory Enforcement TREND. Data Breach. Financial Entity. Regulatory Fine. Be Informed.

Which financial entity is facing an SEC fine for a data breach? Morgan Stanley

How much is the SEC fine? $1,000,000

What was the data breach? Security measures failed to prevent an employee from transfering account information to a private server that was hacked

What do federal rules require of financial entities? policies and procedures that are reasonably designed to protect customer data

The Hill | Morgan Stanley to pay $1M SEC fine for data breach

Law Enforcement TREND. Local Government TREND. Protect Data Security by Approving every Surveillance Technology Purchase. Where the Left and the Right Meet.

What government is requiring authorization from the governing body before a purchase of surveillance equipment can be made? Santa Clara County deep on Silicon Valley

Which police purchases will require approval?  Any law enforcement purchase of new surveillance technologies. e.g.:

  • license plate scanners
  • products that spoof cellphone towers
  • closed-circuit cameras

What entities can approve the police technology?  County board and district attorney approval are required

Why require…

Data Security. Self Driving Cars. Marketing & Hacking Abounds.

Data Security is the 1 key element missing from the 7 states that have passed self driving car laws.

Cars can be hacked. Cars contain data. The data your car’s computers contain can be used for:

  • direct & targeted marketing
  • cam be accessed by hackers

California is addressing vehicle data via regulation by requiring:

  • notice and consent
  • before information can be collected from operators
  • this excludes information that is needed to operate the vehicle

The Guardian | Self-driving cars:…

INTERIM. 3 Reasons Old Data is Still Valuable to Hackers.

  • passwords are valuable because we don’t change them and use them on multiple account
  • its data mining material to engineer more information about your identity
  • a hacker can use 4 year old LinkedIn data for their own illegal purposes, and 4 years later sell it openly on the black market. 

IT Pro Portal | Why four-year-old data is more valuable than you think

 

TREND. Move Infrastructure back to Old School to Thwart Breaches.

What cyber security threat could be helped by old school methods? Electric Grid Security

Who is proposing old school solutions? 4 U.S. Senators: King, Heinrich, Risch, Collins

What does the legislation call for? 

  • 2 year study
  • examinging technology that makes the grid vulnerable
  • how the automated systems can be hacked remotely
  • “reengineer the last mile of the energy grid  to isolate its most important systems”

The Hill | Senate bill would encourage ‘retro’ grid security approach 

TREND. Government Calls on Hackers to Help.

What is civic hacking? hackers doing good to solve governmental problems

How does it work? The feds listed 16 issues that it needs helps with and called for a National Day of Civic Hacking. Examples include:

  • application process for food stamps, business licenses, criminal record copies, business licenses, affordable housing, 
  • developing a community platform for California’s Health and Human Services Commission

Code for America | 4th Annual National Day of Civic Hacking 

Anatomy of a School District Data Breach. 5 Things the School District Did to Respond.

Which school district experienced a data breach of its W-2 data, and all data retlated to persons who have received payment from the school district? Concord, N.H.

When did the breach occur? April

How did the breach occur? Social engineering, a targeted approach in which the hacker masquerades as the superintendent soliciting information

Did the data breach result in the information being used? Yes, false tax returns were filed based on the hacked information

When did the school…

Lege Trend. Ransomware State Legislation. 3 Key Pieces of Intel. Read the Legislation.

What is ransomware? A data security attack that freezes computer data, but leaves the business, such as a hospital, otherwise functioning so that services are not disrupted. A ransom is  asked for and in exchange the data is liberated.

What statutes are states amending? Computer crimes to apply extortion to computer violations

What specific statutory tweaks is California considering after ransomware attacks at California hospitals?

  • defines ransomware
  • makes it a crime to use…

TREND. Ransomware. Hospitals. 2016 the year of ransomware.

3 pieces of ransomware intel critical to hospital data security:

  • Institute for Critical Infrastructure Technology calls 2016 the year of ransomware
  • Targets for ransomware are mobile devices and connected medical devices that offer access points for unauthorized users
  • States are passing anti-ransomware legislation
    • College of Healthcare Information Management Executives support stronger hospital specific ransomwate legislation

Health IT Security | How Ransomware Affects Hospital Data…