Data Protection and Security Blog

Digital Transformation Starts with Security

Digital transformation is significantly impacting business — from data-driven decision-making and cloud adoption to mobility and the Internet-of-Things (IoT) explosion — unleashing innovation to drive business outcomes and opening countless points of attack for enterprises. Decision makers are looking to digital transformation to enhance business agility, deliver customer insights, provide operational efficiencies and increase their market share. The payoff is great, but with a change in technology, comes a need…

This entry was posted in Data Security and tagged sensitive data on March 14, 2019 by Bill Kuypers

Airline E-ticketing vulnerability exposes passenger PII

Traveling can be stressful enough without worrying about your personal information being leaked when you use your e-ticket. Created to make airline travel for customers more streamlined, some airline e-ticket systems’ can expose customer Personally Identifiable Information (PII) via unencrypted check-in links that hackers can easily intercept. In December, it was discovered that several airlines’ e-ticketing systems were vulnerable, including Southwest, Air France, KLM, Vueling, Jetstar, Thomas Cook, Transavia, and…

This entry was posted in Sensitive Data and tagged PII on March 14, 2019 by Bill Kuypers

RSA 2019 Roundup

Spirion’s would like to extend sincere thanks to all of the attendees that visit Spirion during the recent RSA tradeshow at the Moscone Center in San Francisco. The event was a rousing success with over 80 participants gathering to listen to Spirion’s GDPR presentation by our own Scott Giordano, esquire. We also would like to thank all of those who gathered at the Spirion tradeshow booth to take advantage of…

This entry was posted in Events and tagged rsa on March 12, 2019 by Spirion

How to Avoid CISO Job Burnout

A recent survey conducted by the Osterman Research organization of 408 CISO’s in the USA and UK produced some alarming results. Of all those surveyed, nearly 70% discovered some type of malware hidden on their networks for an unknown period of time. In addition, over two-thirds of all CISO’s have held their job for less than three years. And of most concern was the finding that 91% suffer moderate or…

This entry was posted in Data Security and tagged ciso on March 11, 2019 by Bill Kuypers

HIPAA Enforcement Update: Cracking Down on Blocking and Noncompliance

Two units of the Department of Health and Human Services (HHS) — the Office of the National Coordinator for Health IT and the Centers for Medicare and Medicaid Services (CMS) — issued proposed rules to address the blocking of the secure information exchange. According to a CMS administrator, the proposals will “out” healthcare agencies that prohibit patients from accessing their health records. Currently, a major hurdle in enabling the electronic…

This entry was posted in Healthcare and tagged HIPAA on March 8, 2019 by Bill Kuypers

Security Always Makes the List

Every year analysts make a whole host of predictions about which IT trends will grab the most attention. The one forecast that seems to be on every list pertains to security — more complicated, increasing risks and new worries. This year is no different. With talk of IoT and AI and the wonders that they will bring to the business, come the worries of how to secure everything, sort of…

This entry was posted in Data Security and tagged Data Security on March 6, 2019 by Bill Kuypers

Questioning Healthcare Cybersecurity

There is so much more going on in Washington D.C. than scandals and investigations. In an effort to develop a national strategy that improves the safety, resilience and security of the U.S. healthcare industry, Senator Mark Warner, D-Va., reached out to the leaders of four federal agencies and 12 healthcare associations, including to the Department of Health and Human Services, the Food and Drug Administration and the American Medical Association….

This entry was posted in Healthcare and tagged PHI on March 5, 2019 by Bill Kuypers

Data Security Breaches – Times are Changing

Despite these words being sung by a troubadour who is probably still using a typewriter to pen his lyrics, their meaning could never be truer than now regarding data security breaches. Just this week a $3.1 million class action suit was levied against Community Health Systems for a 2014 breach. In addition, electronic health records vendor Greenway Health was hit by the Department of Justice with a $57.25 million fine…

This entry was posted in Breaches, Data Security and tagged Data Security on March 4, 2019 by Bill Kuypers

4 Sensitive Data Security Questions You Should Ask Yourself

Every organization is different and how they handle their sensitive data is just as diverse. But every organization, no matter size or industry, should be asking themselves these 4 questions. Where is Our Sensitive Data and Who has Access? Even highly regulated industries have a tough time identifying data that could be deemed sensitive, much less discerning its sensitivity level. This includes not only personal information but also intellectual property….

This entry was posted in Sensitive Data and tagged sensitive data on February 28, 2019 by Bill Kuypers

Third-Party Breaches Only Getting Worse

It’s common for retailers today to work with third-party partners to offer and deliver goods and services when and how their customers want them. But you still must cover your own bases, especially when it comes to matters of data security. North Country Business Products reported a data security incident that may have allowed unauthorized access to consumers’ credit or debit card information. The company handles payment operations for many hotels…

This entry was posted in Breaches and tagged data breach, third party breach on February 27, 2019 by Bill Kuypers