Topic: cybercrime

Subscribe to cybercrime RSS feed

FERC issues notice of proposed rulemaking to extend reporting requirements for cyberattacks targeting the energy sector

Susan Ross (US)Alexis Wilpon (US)By Susan Ross (US) and Alexis Wilpon (US) on Posted in Compliance and risk management, cybercrime, Data breach
Data Protection Report - Norton Rose FulbrightOn July 23 and 25, 2018, the U.S. Department of Homeland Security (DHS) held public briefings about an attempt by a state-sponsored Russian hacking group to target control systems for U.S. electrical grids and power plants. DHS’ webinar explained that the hackers obtained access to vendors providing computer services to electric utilities companies. This initial … Continue reading

Discovery of New Internet of Things (IoT) Based Malware Could Put a New Spin on DDoS Attacks

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Norton Rose Fulbright - Data Protection Report blogSlightly over one year ago, several major distributed denial-of-service (“DDoS”) attacks took place, including a major event affecting the domain name service provider Dyn, which caused outages and slowness for a number of popular sites, including Amazon, Netflix, Reddit, SoundCloud, Spotify, and Twitter. Now, a new Internet of Things (IoT) botnet, called IoT Reaper, or … Continue reading

Singapore proposes changes to cybersecurity and data protection regimes

Stella Cramer (SG)Wilson Ang (SG)Magdalene LieJeremy Lua (SG)By Stella Cramer (SG), Wilson Ang (SG), Magdalene Lie and Jeremy Lua (SG) on Posted in cybercrime, Data breach
Data Protection Report - Norton Rose FulbrightIn a bid to keep pace with advancements in the technological landscape, the Singapore Government has in recent months embarked on public consultations on its draft Cybersecurity Bill (the Cyber Bill) and its proposed amendments to Singapore’s Personal Data Protection Act (PDPA) to update the country’s data protection regime. These changes will have a significant … Continue reading

New Global Cyberattack Affects Businesses, Government, and Infrastructure

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Norton Rose Fulbright - Data Protection Report blogA new strain of malware began infecting computer systems across the globe on Tuesday.  Similar to the WannaCry ransomware that struck last month, the malware used in this week’s attack spreads quickly across multiple computers on a network, encrypting files and displaying a ransom note that requests $300 worth of bitcoin for a decryption key. … Continue reading

Large Ransomware Attack Affects Companies in Over 70 Countries

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Norton Rose Fulbright - Data Protection Report blogA large-scale ransomware attack began impacting companies and hospitals across the United States, Europe, and Asia early Friday morning.  According to reports, companies in more than 70 countries have reported incidents as of Friday afternoon. The attacks are being caused by ransomware called “WannaCry,” which quickly moves across systems to encrypt large amounts of computer … Continue reading

Hong Kong: SFC consults on proposed measures to improve cyber security for internet trading of securities in Hong Kong

James Parker (HK)Anna Gamvros (HK)By James Parker (HK) and Anna Gamvros (HK) on Posted in Compliance and risk management, cybercrime, Regulatory response
A two-month consultation on proposed measures to reduce and mitigate cyber security risks associated with internet trading of securities in Hong Kong (the Consultation) was launched on 8 May 2017 by the Securities and Futures Commission (the SFC). The Consultation follows a recent review by the SFC of resilience of brokers in Hong Kong to … Continue reading

Singapore legal update: Firm warned for WhatsApp personal data disclosure

Gigi Cheah (SG)Magdalene LieBy Gigi Cheah (SG) and Magdalene Lie on Posted in cybercrime, Data breach, General
Singapore’s Personal Data Protection Commission has on 21 March 2017 issued a warning to a local firm for disclosing a former employee’s personal information in a company WhatsApp group. A director at the firm, Executive Coach International, had shared highly sensitive information about the former employee with 58 members of a chat group comprising staff … Continue reading

Legal Implications of DDoS Attacks and the Internet of Things (IoT)

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in cybercrime
Data Protection Report - Norton Rose FulbrightSeveral significant distributed denial-of-service (“DDoS”) attacks have taken place in the last few weeks, including a major event involving a domain name service provider (Dyn), which caused outages and slowness for many popular sites like Amazon, Netflix, Reddit, SoundCloud, Spotify, and Twitter. This significant attack came on the heels of two major DDoS attacks against … Continue reading

UAE Outlaws Sales of Personal Data and Increases Fines for Companies

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Data Protection Report - Norton Rose FulbrightThe United Arab Emirates Penal Code was amended with effect from October 29, 2016 to outlaw the copying, distribution or disclosure of information that a person obtains in the course of their employment. This new offence will target company insiders (or service providers) unlawfully dealing in personal data. Other changes to the Penal Code will … Continue reading

Major DDoS Attacks Signal Need for Strengthened Cyber Defenses

Daniel Leslie (CA)By Daniel Leslie (CA) on Posted in Compliance and risk management, cybercrime
Data Protection Report - Norton Rose FulbrightOn Friday, October 21, a series of Distributed Denial of Service (DDoS) attacks were launched against the servers of Dyn, a major DNS host. DNS hosts operate in a manner akin to a switchboard for the Internet, helping to route domain names (e.g., dataprotectionreport.com) to underlying IP addresses (e.g., 104.28.6.115). By attacking Dyn, hackers were … Continue reading

FTC Enforcement Possible for Failing to Guard Against Ransomware

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime, Regulatory response
Data Protection Report - Norton Rose FulbrightRecent comments by FTC Chairwoman Edith Ramirez suggest that a company’s failure to take preventative measures to address ransomware could result in an enforcement action by the FTC, even if a company is never actually subject to a ransomware attack. The Chairwoman’s comments reflect a growing concern among US government agencies regarding ransomware and may … Continue reading

U.S. Government Announces Framework for Responding to Critical Infrastructure Cyber Incidents

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime, Regulatory response
Data Protection Report - Norton Rose FulbrightOn July 26, 2016, the White House issued the United States Cyber Incident Coordination Directive (Presidential Policy Directive PPD-41, including an Annex).  The Directive sets forth the principles governing the Federal Government’s response to cyber incidents, including incidents affecting private entities that are part of U.S. critical infrastructure.  The Directive is designed to improve coordination … Continue reading

The Intersection of Trademark Law and Cybersecurity

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in cybercrime, General
US Supreme Court expands digital privacy rights in Carpenter v. United StatesEarlier this week, our colleague Sue Ross wrote on the intersection of trademark law and cybersecurity on Norton Rose Fulbright’s Brand Protection Blog. The post explains that by protecting its brand, a company can help to improve cybersecurity. For example, by seeking to recover “squatted” domain names and complaining to social networks about trademark infringement, a company … Continue reading

UAE Employees Jailed for Privacy Breach Before Ultimately Being Acquitted

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Data Protection Report - Norton Rose FulbrightA recently-reported court case in the United Arab Emirates has highlighted the importance of establishing and implementing good privacy practices, even in the absence of specific data protection legislation. In late 2014, the UAE public prosecutor charged three officials from a federal authority – the general director, a branch manager and an IT manager – … Continue reading

Legal update: Security issue could impact ADP customers

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in cybercrime
Data Protection Report - Norton Rose FulbrightCyber criminals appear to have gained unauthorized access to ADP, Inc.’s self-service customer portal to file fraudulent tax returns for some ADP customer employees. ADP has reportedly confirmed that a subset of its customers have been the victim of tax fraud perpetrated by hackers posing as customer employees on ADP’s portal. We recommend that ADP … Continue reading

Ransomware Incident Response – Prevention, Readiness and Strategy

Norton Rose FulbrightBy Norton Rose Fulbright on Posted in Compliance and risk management, cybercrime
Data Protection Report - Norton Rose FulbrightLast week, the Hollywood Presbyterian Medical Center was able to successfully negotiate the release of a collection of system resources and data files that had been encrypted and held hostage by ransomware attackers. Ransomware is a peculiar type of malware that is not designed or intended to steal personal or confidential information. Rather, ransomware is … Continue reading

Council and European Parliament reach agreement on NIS Directive

Jay Modrall (BE)Marcus Evans (UK)By Jay Modrall (BE) and Marcus Evans (UK) on Posted in cybercrime, Regulatory response
Data Protection Report - Norton Rose FulbrightOn December 7, 2015, the Council of the European Union (the Council) reached an informal agreement with the European Parliament on a new EU directive on network and information security (NISD). The agreement marks the conclusion of two years of work, since the European Commission (the Commission) and the High Representative of the European Union … Continue reading
LexBlog