Louisiana declares state of emergency after ransomware attack
Governor Edwards of Louisiana has declared a state of emergency after three of its school districts were hit with ransomware attacks.
Data Breach
Equifax data breach settlement
Equifax Inc. has agreed to sign a settlement with the FTC to pay at least $575 million, and potentially up to $700 million, related to the massive data breach in 2017 that impacted nearly 147 million people.
Slack resets passwords exposed in 2015 breach
Slack has reset passwords for close to 1% of overall Slack accounts in response to new information learned from 2015 security breach.
British Airways to get fined $230M for data breach
British regulators announced intentions to fine British Airways $230 million (£183m) for a data breach that impacted close to 500,000 customers.
Former Equifax executive goes to prison for insider trading
A former Chief Information Officer (CIO) of Equifax had been sentenced to federal prison for insider trading.
Quest Diagnostics data breach impacts 11.9 million patients
Quest Diagnostics has confirmed an unauthorized user gained access to a third party billing service system to potentially access personal data on nearly 12 million patients.
Flipboard confirms data breach, resets passwords
News aggregator Flipboard warned that an unauthorized person gained access to subset of user account data and cryptographically protected passwords.
First American Financial Corp. leaks hundreds of millions of customer records
First American Financial Corp., one of the world’s largest real estate title insurance companies, exposed hundreds of millions of title insurance customer financial records.
Magecart skimming attack targets online campus stores
Security researchers from Trend Micro have uncovered a Magecart skimming attack that targeted 201 online campus stores in the United States and Canada.
Washington State passes new Data Breach law HB 1071
Washington State legislators passed a new Data Breach bill, HB 1071, that strengthens data breach notification laws. The new law now includes the expansion of the definition of personal information and also reduces the breach notification deadline.