January 2017 – InfoHive

Ransomeware Hits TX Police Department. 3 Pieces Informed Intel.

Which police department? Cockrell Hill Police Department

What digital data was lost by way of a ransomware attack? video evidence & digital documents

How was the ransomware attack triggered? “someone clicked on a cloned email made to look like it was sent from a department email address”

What did the police department do in response to the ransomeware? wiped their servers in lieu of paying the ransom

A ransomware attack hit Washington D.C.’s closed circuit tv 8 days before inauguration. Here’s what you need to know to get up to speed:

70% of storage devices recording data from D.C. police surveillance cameras were hit
Forced major city wide reinstallation
The city addressed the ransomeware without paying a ransom by:
- taking devices offline
- removing all software
- restarting the system

The legislation: Security and Privacy in Your Car Study Act of 2017

The authors: Reps. Joe Wilson (R-SC) and Ted Lieu (D-CA)

What does the bill do? Brings together the following entities to determine how to regulate data for connected cars:

What elements do these groups need to consider in their…

How constituents feel about data breach laws:

68% of internet users believe current laws are not good enough
64% believe the government should do more to regulate advertisers
Favor limits on how long the records of their activity are stored
74% of Americans say it is “very important” to be in control of their personal information
64% of Americans have personally experienced a major data breach
49% feel that their personal information is less secure than it was 5 years ago
41% of…

adding biometric and geolocation data to the definition of personal information that triggers a data breach notification
regulations related to surveilance equipment used by law enforcement
protecting disclosure of a a person’s religious affilaition from the government

State Affairs recommendations:
- a dedicated and collaborative cybersecurity initiaitive
- clear legislative direcetives
- direct agencies to collaborate
- a central repository for its cybersecurity program
Urban Affairs recommendations:
- appropriate funds for a grant program to support cybersecurity training and information sharing costs for small municipalities and utilities
- creation of cybersecurity training and information sharing programs within agencies
- increase the level of…

Massachusettes, home of the Draft Kings, passed new fantasy sports regulations.

The editorial board reactions: Fantasy Sports Regulations have no cybersecurity

The cybersecurity response from daily fantasy sports:

fantasy sports regulations do require comapnies to have security measures
comapnies are subejct to prosecution for not following the regulations
the beauty of fantasy sports is that the playing information is public information

What cybersecurity experts say:

CryptoMove embraces a business model that replaces encryption with breaking data into pieces and moving it around.

Instead of hackers having way to your document in a garbage can, hackers have to reassemble microshredded pieces.

Beware regulators who set a standard level of encryption as a requirement. The industry changes.

Multidisciplinary application. Cybersecurity is not just for the Information Officer.
Data is an asset. Protect it. Have a game plan for how long you’re keeping the asset.
Data lives on mobile devices and moveable devices too. Protect those too.
Know the information you keep.
Train employees. Employees create cybersecurity breaches too.
Legislative and regulatory data security standards are the floor, not the ceiling.