Trouble viewing this email?  View in web browser ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by NetscoutNetscout

Radiology Group Sues Broker Over Lapsed Cyber Insurance Policy

By Kim S. Nash

 

Happy Friday! Here's a sticky situation: Hackers hit a radiology clinic with ransomware after its cyber insurance policy expired and before a new one was in place. 

That was an unhappy surprise for Raleigh Radiology Associates in North Carolina and now the company is suing its broker in an effort to recover costs incurred in responding to the attack. Read more from my colleague James Rundle. 

More news below, plus a recap of our latest cybersecurity coverage.

One more thing: Please scroll down to register for the WSJ Pro Cybersecurity Forum, our virtual conference on May 31. I hope to see you on screen that day!

 

‏‏‎ ‎

CONTENT FROM OUR SPONSOR: Netscout

DDoS Attacks Targeting NATO Members Increasing

Finland, Hungary, and Turkey have been inundated with DDoS attacks over the past year. Why? The answer lies in the fallout of the Russo-Ukrainian war, as these three nations all have been instrumental in getting Finland and Ukraine to join NATO.

Click Here

 

 

More Cyber News

PHOTO: FLORENCE LO/REUTERS

Chinese president Xi Jinping has put state-security czar Chen Yixin in charge of a crackdown on U.S. businesses, according to people familiar with the matter. The campaign has included raids on Chinese offices of U.S. due-diligence firms and questioning of staff at Bain consulting firm. Read more from WSJ. 

EyeMed Vision Care agreed to pay $2.5 million to settle cases with Florida, New Jersey, Oregon and Pennsylvania related to alleged cybersecurity failings in a 2020 data breach. State investigators found EyeMed's cyber-risk assessment lacking as well as poor password policies and other gaps that contributed to a phishing attack and email account takeover that breached the data of 2.1 million patients. The state of New York last year fined the vision-benefits manager $5.1 million for the breach and security deficiencies. (SC Magazine)

Core systems are still out at Harvard Pilgrim Health Care after a cyberattack four weeks ago. The provider, owned by Point32Health in Boston, said it could be a number of weeks more until full restoration of services. (NBC Boston)

Point32Health said it is working to: 

  • Enhance user access protocols and vulnerability scanning
  • Identify prioritized security improvements
  • Implement "a new sustainable" endpoint detection and response system
  • Reset passwords for administrative accounts
 

Join us! Our Forum is May 31, online. 

We'll be talking about using AI to plug talent gaps, new rules from the SEC, responding to a hack, the latest in cyber insurance and more! 

Check out the agenda and sign up.

 

Privacy & Surveillance

PHOTO: TANNEN MAURY/SHUTTERSTOCK

Antiabortion group used cellphone location data to target ads to Planned Parenthood visitors. Veritas Society, a nonprofit fund established by the organization Wisconsin Right to Life, was using precise geolocation data to target those ads from as early as November 2019 through late last year, WSJ reports. Veritas Society and Wisconsin Right to Life didn’t respond to requests for comment.

Data-sharing ban and fine: The Federal Trade Commission said the developer of the free fertility app Premom deceived users and shared health data with two companies in China without proper notifications. The FTC ordered app maker Easy Healthcare to pay a penalty of $100,000, to stop sharing data with third parties for advertising purposes and to get users' consent for other data sharing. 

U.S. Customs and Border Protection is using Babel Street's Babel X, an AI tool as part of its screening process. The tool can associate individuals by name or other identifying information with their social-media activity and location data, Motherboard reports.

$39.9 Million

Amount Google agreed to pay Washington state to settle a lawsuit over the company's location-tracking activities. Google continued to track users after they turned off the feature, the state said. (Reuters)

 

Cybersecurity Market

With IPO activity in a lull, cybersecurity companies are looking to mergers and acquisitions as an exit strategy through 2024, according to investment bank Capstone Partners. 

Manifest Cyber, a startup based in Washington, D.C., and focused on creating software bill of materials, raised $6 million in seed funding led by First Round Capital. (SecurityWeek) 

Huntress, which offers security tools and services for small and medium businesses, raised $60 million in a Series C round led by Sapphire Ventures.

 

In Case You Missed It

Cybersecurity Leaders Suffer Burnout as Pressures of the Job Intensify. Fallout from resource constraints is more stressful for cyber executives, one CISO says.

Ex-Twitter Cyber Chief Joins Cloud-Security Company Lacework. Lea Kissner is the latest senior hire for the company, which has spent much of the past year restructuring.

U.S. Trains Ukrainian Law Enforcement to Pursue Russian Crypto Assets. IRS is providing training to Ukrainian authorities to help in efforts to track down illicit crypto transactions.

Breach of Mental-Health Records Challenges Nation’s Court System. Hacker, reaching a dead end in extorting clinic in Finland, targeted individual patients.

 

Executive Insights

Weekly highlights from across WSJ Pro that we hope are useful to you. They are unlocked for WSJ subscribers.

  • More consolidation lies ahead for private equity as firms look to amass fee-generating assets.
  • Renewable-energy companies are leasing warehouses at a faster pace, boosting the otherwise sagging demand for industrial real estate.
  • Companies outside of the tech sector are facing an uphill climb in recruiting Big Tech’s laid-off software developers, engineers and data scientists.
  • Changes to how companies account for renewable energy may lift the veil on actual usage vs. credits bought to offset fossil-fuel use.
 
Advertisement
 

About Us

The WSJ Pro Cybersecurity team is Deputy Editor Kim S. Nash (on Twitter @knash99), reporter James Rundle and reporter Catherine Stupp (@catstupp). Follow us on Twitter @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2023 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe