NYDFS Charges First Company for Violating Its Cybersecurity Regulation

NYDFS made its first enforcement action around its Cybersecurity Regulation, 23 NYCRR 500, alleging errors and deficient controls led to a breach at an insurance company.

---

Fed Offers Guidance on Curbing Synthetic Identity Fraud

The Federal Reserve shared insights around mitigating synthetic identity fraud, one of the quickest growing financial threats, this week.

---

Email Error Leads to Exposed PHI of 11,500 Patients

A health plan recently disclosed a data breach of 11,500 patients that was triggered by an email mistake.

---

PCI SSC Releases New Standard to Secure Devices

A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.

---

Food Companies Spar Over Stolen Trade Secrets Claim

In a new lawsuit, a candy bar company is alleging a former employee downloaded more than 6,000 files involving its trade secrets, strategies, and market insights, before leaving to join a competitor.

---

FBI, CISA Say China Is Targeting COVID-19 Research

In a PSA on Wednesday, the FBI and CISA warned healthcare and pharmaceutical orgs that Chinese hackers are seeking valuable IP and health data regarding COVID-19 treatment.

---

FTC To Review Healthcare Data Breach Notification Rule

The FTC is seeking comment on whether or not it should make changes to its Health Breach Notification Rule, a rule that compels orgs to disclose when health records are breached.

---

U.S., UK Govt: APT Groups Targeting Healthcare Orgs

A joint alert via cybersecurity agencies in the UK and U.S. this week warned about how APT groups are exploiting COVID-19 to collect PII, IP, and other intelligence.

---

FINRA Warns of Phishing Emails Targeting Financial Firms

FINRA warned financial services firms of a new phishing campaign on Monday that it claims is widespread and ongoing.

---

DoD Issues Guidelines to Protect PHI During Pandemic

The U.S. Department of Defense is urging military medical treatment facilities to protect controlled unclassified data, like patient health information and personally identifiable information.

---