2015 – Page 3 – Cyber Law Watch

Breaches Update – July 2015

Jul 15 2015

U.S. Office of Personal Management (OPM)
The U.S. government has confirmed a second cyber attack on the OPM database. Hackers are confirmed to have stolen the personal information in relation to former, current and prospective federal government employees effecting at least 21.5-mllion people (almost 7% of the entire U.S. population).

See the ABC report here, CNN report here and Guardian report here.

OPM’s website, sets out how person’s may have been affected by the breach and what OPM is doing to assist those affected. OPM has sent notifications to those affected by the incident and is offering free identity theft monitoring and restoration services including identity theft insurance and credit monitoring.

OPM has also outlined a cybersecurity action report, available here.

Australian Prudential Regulation Authority (APRA) paper

Jul 06 2015

by Jim Bulling and Julia Baldi

APRA has released an information paper on outsourcing involving shared computing services, including cloud. The paper discusses risks for outsourcing shared services and ways in which APRA regulated entities may seek to minimise these risks.

See the information paper here.

Breaches Update – June 2015

Jun 20 2015

by Jim Bulling and Julia Baldi

U.S. Office of Personal Management Breach
The U.S.Government’s Office of Personal Management announced that its database has been subject to a cybersecurity breach. Hackers stole data relating to federal government employees dating back three decades and may effect more than four million people.

See the ABC report here and Forbes report here.

The OPM is offering affected individuals credit monitoring services and identity theft insurance. See the OPM announcement here.

Westpac Acquires Cyber Security Firm

Jun 16 2015

by Jim Bulling and Julia Baldi

Westpac has acquired an 11% stake in cyber security firm QuintessenceLabs.

See the Business Insider article here.

Reports and Surveys Update

May 25 2015

by Jim Bulling and Julia Baldi

Tred Micro Q1 2015 Report
Trend Micro Q1 2015 Report finds Australia is the target of increasing ransomware attacks, with Australian holding 6% of the world’s ransomware detections. Australia also ranked second in the world for countries with the highest number of Point of Sale RAM Scraper infections (malware which sources card details) with 10% of the world’s infections, after the United States with 23%.

See a summary of the report here, and the full report here.

Blue Coat Systems Inc
Blue Coat Systems, Inc., released result of a global research study of 1,580 respondents across 11 countries. Results from the survey found that universally, workers visit inappropriate websites while at work despite typically being fully aware of the risks to their companies.

See the media release here.

Cyber Resilience for Financial Services Entities

May 20 2015

by Jim Bulling and Julia Baldi

ASIC Report 429
In March this year, the Australian Securities and Investments Commission (ASIC), issued Report 429 Cyber resilience: Health check (REP 429). The report aims to highlight the importance of cyber resilience for entities regulated by ASIC, including Australian Financial Services Licence holders, Australian Credit Licence holders and listed entities. The Report indicates that ASIC is keen to ensure that Australia keeps pace with developments in Europe and the United States in combatting cybersecurity risks.

Click here to read the full article.

Breaches Update – May 2015

May 01 2015

by Jim Bulling and Julia Baldi

Pacnet
Pacnet, a subsidiary acquired by Telstra in April 2015, was hit by a major data breach affecting thousands of customers including The Australian Federal Police and government agencies. The breach occurred two weeks before the deal to acquire Pacnet by Telstra was finalised but was not disclosed to Telstra. Telstra is reportedly considering its legal options in respect of both the breach and the non-disclosure by the vendors.

See the Sydney Morning Herald article here.

Airline Computer Hacking
The FBI has alleged that a cybersecurity researcher had hacked into airline computers 15-20 times causing aircrafts to climb against pilot instructions.

See the report here.

Government Regulation, Legislation and Enforcement Updates

Apr 20 2015

by Jim Bulling and Julia Baldi

Australian Federal Government Cybersecurity Review
The Australian Federal Government holds a Cybersecurity Review.

See the Australian Government’s summary of the review here.

SEC Guidance Update
The SEC’s Investment Management Team published a Guidance Update which outlines measures managed funds and investment advisers may wish to consider in addressing cybersecurity risk. The guidance includes practical tips applicable to Australian entities.

See the Guidance Update here.

Australia Cyber Attack Statistics

Apr 01 2015

by Jim Bulling and Julia Baldi

New statistics show cyber attacks on Australian businesses increased by 20% in 2014.

See the ABC report here.

European Union Cybersecurity Dashboard Report

Mar 19 2015

by Jim Bulling and Julia Baldi

The Business Software Alliance, European Union cybersecurity dashboard: A path to a Secure European Cyberspace published by the BSA. The report aims to allow government officials in each of the EU Member States with an opportunity to evaluate their country’s policies against these metrics, as well as their European neighbours. The report is an interesting read for Australian companies holding, or considering holding, data in Europe.

See the report here.

Archive:2015