FBI Advice. Ransomeware Data Breach Attack.

The FBI advice for ransomeware attacks, which hold a businesses data hostage for a ransom:

DO NOT PAY THE RANSOM.

Refresh my memory, what are some of these ransomeware attacks? Several hospitals in California have had their systems frozen by ransomeware, forcing a move to manual paper hospital administration. The ransoms have been as small as $8,000.

WallStreet Journal | CIO Journal | FBI Cyber Division Chief Advises Companies Not to Pay Ransom for Release of Data

3 Steps for a FitBit can Lead to a Conviction and Probation.

WHO WAS CONVICTED: A woman in Pennsylvania reported her rape to the police

WHAT EVIDENCE LED TO CONVICTION: When police came to the scene, they collected as evidence the woman’s fitbit found laying in a hallway

WHY DID THE EVIDENCE INDICATE GUILT: The woman claimed she had gone to sleep and was later attacked, but the data downloaded from the Fitbit indicated the woman was walking about at the time and logged her heart rate

Wall Street Journal | Prosecutors Say Fitbit Device Exposed…

Lege Trend: Requiring Tech Companies to Decrypt. Read the Bill. Plan your Strategy.

What state legislature considered a bill to fine companies that do not decrypt after receiving a court order? California

What happened to this bill to fine companies? Died in committee without a vote

What did opponents to the bill say?

  • forced decryption weakens security and personal privacy
  • “Do we have a world where there’s no privacy whatsoever for the average citizen?
  • Assuming that this body is OK with every agency in the U.S. having access to everything, every application, every…

Tech & Privacy Interests Do Not Like Data Security Legislation. 3 Keys Informed Intel

  • Tech & Privacy Interests don’t like provisions forcing technical assistance to government investigations
  • Why the hestiancy over forced assistance? It will lead to greater data insecurity
  • Ties the hand of businesses that want to provide their customers greater security

The Hill | Encryption bill draft worries tech community

CNET | Encryption bill would force companies to surrender user data

Data Security Arrests for Water Infrastructure Cyber Mayhem. Informed Intel:

The U.S. Justice Department arrested invididuals that attempted to break into a small dam to disrupt operations. The informed intel:

  • 1st time someone has been charged with disrupting, or attempting to disrupt, critical U.S. infrstructure. 
  • The charges are” cyber myham” to disrupt the water infrastructure. 

Washington Post | U.S. charges Iran-linked hackers with targeting banks, N.Y. dam 

Lege Trend from SXSW: CyberStalking Crime. Data Privacy.

Who is touting new legislative approach to cyberstalking? Rep. Katherine Clark (D-Mass.)

What does her bill do? 

  • make it easier for law enforcement to arrest cyberstalkers 
  • create a $20 million grant to aid local and state law enforcement
  • Create a national resource center for research & technical information for law enforcement officers and prosecutors.

SC Magazine | SXSW: Dem. lawmaker plans to introduce online harassment legislation

BuxxFeed | Congresswoman Unveils Plans To…

INTERIM & TREND: Data Ransom. Newest Target: Local Governmental Entities & Private Sector. 5 Bits Informed Intel.

What local governmental entity department was the newest target to hackers holding data for ransom? Durham, N.H., Police Department

How did the hackers do it? Attached a file to a email on a relevant police investigation that appeared to be fax file.

What did the police department do? Pay the ransom? Beat the ransom technology? The police department mitigated damage by recovering the locked files from a backup copy that hadn’t been infected. The department paid no ransom.

Is this…

INTERIM. More Data Security Warnings for Energy Infrastructure

Who is issuing the warning? The Obama Adminsitration

What entities are being warned about data security threats?

  • power companies
  • water suppliers
  • transportation networks

What’s sparked the warning? The attack n the Ukraine’s power grid 2 months ago. It was the first cyberattack that produced a wide spread blackout

What was the target of the cyber attack? industrial control systems that act as the intermediary between computers and the switches

What could hackers do with control…

5 Bits Informed Intel on License Plate Reader Data and Legislative Restrictions. Procurement Doors Closing.

How much data has been gathered by license plate readers in Texas? Estimated 10 million license plate pictures, with locations, collected by month.

What can be done with this stored license plate information?  It can track the location of a vehicle by plotting its sightings by day and time

What’s happening on this legislatively?

  • In 2015, Texas bills preventing license plate recording & collection died
  • Arkansas & Utah prohibit private companies from amassing license plate data…