TalPoint Weekly Wrap Up 5/27/2022
FBI director blames Iran for ‘despicable’ attempted cyberattack on Boston Children’s Hospital
CNN: Boston Children’s Hospital, one of the premier pediatric facilities in the country, avoided a major hack due to working collaboratively with the FBI. Iranian government-backed hackers attempted to perform a cyberattack in June 2021. FBI Director Christopher Wray called the incident “one of the most despicable” cyberattacks he had ever seen. Thankfully no ransomware was deployed to the hospital’s network and the FBI was able to stop the hackers before serious damage was done. However, the incident highlights the serious risks posed by government sponsored cyber actors from Russia, China, Iran and North Korea.
More: Reuters | Boston Globe | Health IT Security
Health Apps Must Shield Reproductive Data, California AG Urges
Bloomberg Law: Rob Bonta, California’s Attorney General, is urging fertility tracking apps to develop stronger security programs to protect sensitive information in the face of unprecedented threats to reproductive freedom. Bonta’s office is recommending internal employee training on privacy concerns and obtaining consent from consumers before sharing user data. This guidance comes after concerns over misuse of data if the US Supreme Court overturns Roe V. Wade, which is expected to happen.
More: CA Attorney General | Consumer Reports
Twitter to Pay $150M In Settlement With FTC, DOJ for Allegedly Misusing Data
Hollywood Reporter: Huge fines for communications giant, Twitter. They were fined $150 million by the FTC and the DOJ for misleading users about how it treated personal data. From at least 2013 to 2019, the company collected users’ email addresses and phone numbers but did not inform them that the information was used to help marketer target ads. The company will be required from profiting from this data and must implement a privacy and information security program to safeguard user information.
More: DOJ | Compliance Week ($) | NY Times ($)
Our large and diverse network of experts is here to help...
Charles M.
Principal
Charlies is a 14 year cyber security expert. He started his career in the U.S. armed forces and then transitioned into commercial roles. A security engineer by training, he's well-versed in tool deployment and administration.
Ellen K.
GRC Expert
Ellen bring a decade of GRC expertise to the TalPoint community. She's knowledgeable on a variety of frameworks and employs a methodical approach to compliance. She's available for needs assessments, gap assessments, internal audits, and for certain frameworks running independent 3rd party audits.
Zachary C.
Founder and CRO
Zachary bring a 20+ year career in risk management to the TalPoint community. He's worked across healthcare, finance, and supply chain manufacturing. His broad experience offers both a holistic view of risk as well as a common sense approach to risk management.