Month: March 2025

In a significant legal development, the Charleston Area Medical Center (CAMC) in West Virginia is facing a federal class-action lawsuit following a data breach that exposed the personal information of over 67,000 individuals. The breach, which occurred in October 2024, has raised serious concerns regarding the adequacy of CAMC’s data security measures. Key Takeaways CAMC … Read more

A significant data leak at Hipshipper, a third-party international shipping service, has exposed the shipping records of over 14 million customers. The breach, attributed to a misconfigured cloud database, raises serious concerns about the security of personal information during the peak holiday shopping season. Key Takeaways Over 14 million shipping records exposed due to a … Read more

A significant data breach at Northwest Arkansas Community College (NWACC) has raised concerns among students and staff after personal information may have been compromised. The breach, which occurred last summer, has prompted the college to take immediate action to inform those affected and enhance its cybersecurity measures. Key Takeaways NWACC experienced a ransomware attack on … Read more

On February 6, the Government of Canada unveiled its latest National Cyber Security Strategy (NCSS), aimed at enhancing the nation’s defenses against increasingly sophisticated cyber threats. This strategy builds on the previous edition from 2018, which established key institutions like the Canadian Centre for Cyber Security and the National Cybercrime Coordination Unit under the RCMP. … Read more

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reaffirmed its commitment to safeguarding the nation’s critical infrastructure from escalating cyber threats, particularly those posed by the notorious Qilin ransomware group. This announcement comes amid rising concerns over cyberattacks targeting various sectors, including healthcare and media. Key Takeaways CISA emphasizes its mission to defend against … Read more

The Cyberspace Administration of China (CAC) has announced new measures regarding data protection compliance audits, set to take effect on May 1, 2025. These measures aim to enhance the protection of personal information in accordance with the Personal Information Protection Law (PIPL) and the Administrative Regulations on the Security of Network Data. Key Takeaways The … Read more

The Department of Justice (DOJ) has issued a final rule aimed at safeguarding sensitive personal data from foreign adversaries. This regulation, effective April 8, 2025, prohibits and restricts the transfer of bulk sensitive personal data to certain countries deemed a national security risk, including China, Russia, and Iran. Key Takeaways The rule targets data transactions … Read more