FTC has taken action against Global Tel*Link Corp

The Federal Trade Commission (FTC) has taken action against Global Tel*Link Corp. and its subsidiaries for failing to adequately secure personal data and notify consumers after a data breach. The breach occurred due to changes made by a third-party vendor to the security settings for the data stored in the cloud, leaving the personal data …

Snooping in Medical Records

Yakima Valley Memorial Hospital has settled with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) for $240,000 after security guards accessed medical records without authorization. The hospital will update policies and procedures to protect patient information and train employees to prevent future breaches. OCR Director Melanie Fontes Rainer stressed the …

FTC Finalizes Order with 1Health.io Over Charges it Failed to Protect Privacy and Security of DNA Data

The Federal Trade Commission (FTC) has reached a settlement with genetic testing firm 1Health.io over charges of failing to protect the privacy and security of DNA data and making unfair changes to its privacy policy. The FTC accused 1Health.io, formerly known as Vitagene, of deceiving consumers about its privacy and security practices. The company allegedly …

Disclosure of Patients’ Protected Health Information to a News Reporter

St. Joseph’s Medical Center has settled with the Office for Civil Rights (OCR) over a HIPAA investigation regarding the disclosure of patients’ protected health information to a news reporter. The medical center provided a national media outlet with access to COVID-19 patients’ information without obtaining written authorization. OCR determined that three patients’ information was disclosed, …

How Effectively Managing Risk Bolsters Cyber Defenses

In today’s rapidly evolving digital landscape, where cyber threats and vulnerabilities continually emerge, it’s obvious that eliminating all risk is impossible. Yet, there’s a powerful strategy that can help address your organization’s most critical security gaps, threats and vulnerabilities — comprehensive cyber risk management. It goes beyond technical controls and considers organizational factors such as …

FTC Announces Exploratory Challenge to Prevent the Harms of AI-enabled Voice Cloning

The Federal Trade Commission (FTC) has announced the Voice Cloning Challenge to prevent the misuse of AI-enabled voice cloning technology for fraud and other harms. The challenge aims to promote the development of ideas that protect consumers from the negative effects of voice cloning. The FTC will use its enforcement authority to target companies that …

Four Ways Disasters Fuel Cyberattacks

Your business, in all likelihood, already faces numerous challenges in today’s tech-driven world. However, the aftermath of an unexpected disaster can push your organization to breaking point. This unintentionally creates opportunities for cybercriminals to launch devastating attacks, amplifying the chaos caused by such events. Disaster preparedness should be a top priority for your business — …

3 Steps to Zero Trust Cybersecurity for Small Businesses

Cyberattacks have become rampant and have also grown in sophistication. A simple lapse in your network security could lead to a chain of events that could prove catastrophic for your business. You can avoid this by implementing a robust cybersecurity framework such as zero trust.   Zero trust asserts that no user or application should be …

What to Look for in an Outsourced IT Partner

In today’s digital age, most businesses rely heavily on technology to streamline their operations and stay ahead of the competition. However, managing an entire IT infrastructure in-house can be overwhelming and costly.   That’s where outsourcing IT services comes into play. By partnering with a reliable and efficient outsourced IT provider, you can offload the …

The Interim DFARS Rule and What It Means for You

The Cybersecurity Maturity Model Certification (CMMC) was formally made part of the Defense Federal Acquisition Regulation Supplement (DFARS) in January 2020 and updated to CMMC 2.0 in November 2021. The decision affected more than 300,000 defense industrial base (DIB) members, and many found themselves drowning in all kinds of unnecessary noise surrounding CMMC and its …