This is the first in a series of posts about the implementation of the California Consumer Privacy Act (CCPA)

I’ve been concerned about this issue for some time now. As a resident of California, I’m entitled under the California Consumer Privacy Act (CCPA) to ask about the data that companies have mined from me. Recently, I did just that. Even though I closely follow cyber risk and privacy topics for a living, I was…

A Q&A with Winston Krone of Kivu Ransomware is on the rise, and so, too, is the chance of having to pay a ransom to recover critical data, yet this practice remains a gray area for regulatory compliance. One way that businesses can mitigate the potential of regulatory risk is to respond to cyber extortion…

A Q&A with Ron Raether of Troutman Sanders In the wake of the COVID-19 pandemic, the traditional workforce has largely transformed into a work-from-home workforce, raising novel cyber security issues for organizations—particularly given a wave of attacks capitalizing on newfound vulnerabilities. One way to prepare for the current reality is to update cyber incident response…

Over the past 18 years at NetDiligence, we’ve often been asked about the future of ransomware. And the truth is that even after 18 years in this space, no one can fully predict what will happen. Even when ransomware became more widespread during the 2000s, no one could have imagined the current magnitude of the…

The COVID-19 outbreak has necessitated the creation of a mobile workforce practically overnight. Yet this sudden change raises cybersecurity and privacy issues that companies must now reckon with. The webinar “COVID-19 Emerging Issues: Managing Cyber Risks of a Remote Workforce and Global Privacy Concerns,” presented by NetDiligence and Arete Incident Response on March 24th, addressed…

Ransomware is a type of malware designed to block access to a computer system until a sum of money is paid. Typically, a ransomware attack starts with an innocent-looking email with an infected link or fake document attached. In fact, the average company received a whopping 90% of their detected malware through email, according to…

Deepfakes: A Rising Cyber ThreatA Q&A with John Farley of GallagherOne of the most dangerous cyberattacks emerging on the threat landscape is also among the most difficult to detect or prevent. Deepfake technology enables perpetrators to mimic the voices and images of real people and it has significant consequences for companies, individuals and the democratic…

As IT systems and data play increasingly important roles in business, opportunities for cybercriminals continue to grow. For the first time, the annual Allianz Risk Barometer Report found cybercrime to be the number one concern for companies around the globe. The increase in concern over cybercrime coincides with a rise in the number of ransomware…

What Insurers Need to Know About New York’s SHIELD ActA Q&A with Laurie Kamaiko of Saul, Ewing, Arnstein & Lehr LLPGoing into effect in its entirety on March 21, 2020, the New York SHIELD (Stop Hacking and Improve Electronic Data Security) Act updates previous data security laws while creating more obligations and potential concerns for…