No need to hack when it’s leaking, DC Health Link edition

On March 12, DataBreaches reported on the Health Benefit Exchange Authority data that was first leaked by a forum user  known as “IntelBroker” and then by “Denfur.” The DC Health Link incident attracted a lot of media attention because it involved members of Congress, their staff, and their families. As StateScoop reported today,  DC...

Monetary Authority of Singapore Sets Out Revised Expectations for Notification of Data Breaches by Licensed Insurers

Rajesh Sreenivasan, Steve Tan, Benjamin Cheong, Lionel Tan, Tanya Tang, Wong Onn Chee, Simon Goh, and Wang Ying Shuang of Rajah & Tann Asia write: On 22 February 2023, the Monetary Authority of Singapore (“MAS“) issued Circular No. ID 03/23 – Notification of Data Breaches to the Monetary Authority of Singapore (“Circular 03/23“). Circular...

Data from Vietnam’s state-owned oil and gas group and affiliated firms leaked

Three Vietnamese firms involved in the petroleum industry and infrastructure may first be learning that some of their files are being given away freely on BreachForums. Forum user Kernelware posted a listing early Tuesday, identifying the firms as PetroVietnam, Long Son Petrochemicals, and POSCO Engineering & Construction. Kernelware’s post also notes, “…these are just...

Ransomware Vulnerability Warning Pilot (RVWP)

The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), which President Biden signed into law in March 2022, required CISA to establish the RVWP (see Section 105 ). ALERT CISA Announces Ransomware Vulnerability Warning Pilot Release Date March 13, 2023 Today, CISA is announcing the creation of the Ransomware Vulnerability...

Company accuses former exec of data theft

TNN reports: A company engaged in providing holistic care to children with special needs has accused one of its former executives of stealing confidential data and using the same to start a similar business with a rival firm. In its complaint, the company officials alleged that they hired Pankaj Kumar as deputy general manager...

Shopee, Carousell most popular platforms used by phishing scammers

CNA reports: Taipei, March 12 (CNA) Shopee and Carousell, two online marketplaces based in Singapore, have been the two C2C platforms on which customers were most likely to fall victim to phishing scams in Taiwan over the past five weeks, the Criminal Investigation Bureau (CIB) said Sunday. After analyzing information reported by the public...