Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Bouygues Telecom

    The Target: Bouygues Telecom is one of the largest telecommunication service providers in France, offering mobile, internet, and IPTV services. Bouygues Telecom has 14.5 million mobile subscribers, 9,000 employees, and an annual revenue of €56.8 billion ($66B).

    The Take: According to the FAQ, the following customer information was stolen: Contact details; Contract information; Civil status data; Company details (for business customers); International Bank Account Numbers (IBANs).

    The Vector: A previous statement says that internal investigations confirmed that the attack was orchestrated by a 'known cybercriminal group' that targeted 'specific internal resources.'

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    JPMorgan Hired a New Cybersecurity Chief from Goldman Sachs' Investment Bank

    2025-09-24

    eFinanical Careers: Multiple banks have been recruiting senior cybersecurity specialists as technologies like AI make cyberattacks much more powerful. Bank of America hired an ex-US Secret Service investigator, while HSBC hired a former UK Home Office technology director.

    Read more...

    Atos Wins €326 Million European Commission Cybersecurity Contract

    2025-09-24

    Investing.com: Atos has secured a major cybersecurity contract from the European Commission valued at up to €326 million, the global AI-powered technology leader announced.

    Read more...

    Global AI In Cybersecurity Market Size Projected to Reach $93 Billion By 2030 Due To Frequent High-Profile Cyberattacks

    2025-09-24

    PR Newswire: Artificial Intelligence (AI) technologies, including natural language processing and machine learning, are increasingly used to enhance cybersecurity measures.

    Read more...

    Cybersecurity Audits Now Mandatory for ‘Crypto’ Firms in India

    2025-09-24

    CoinGeek: A surge in cyber frauds targeting the digital asset space has prompted the Indian government to issue an urgent directive which requires all digital asset exchanges, custodians, and related intermediaries to undergo extensive cybersecurity audits.

    Read more...

    SonicWall Customers Warned Abou Brute Force Attacks Against Cloud Backup Service

    2025-09-23

    Cybersecurity Dive: Hackers are conducting brute force attacks against the MySonicWall.com portal in order to access the company’s cloud backup service for firewalls, SonicWall and federal authorities warned in advisories.

    Read more...

    Many ‘Material’ Cybersecurity Breaches Go Unreported: VikingCloud

    2025-09-23

    CFO Dive: It was not clear to what extent, if any, that surveyed companies have broken any cybersecurity laws by failing to report breaches.

    Read more...

    Ransomware Hits IT Firm, Data Leaked from About 20 Private Equity Firms

    2025-09-22

    Business Korea: It has been revealed that servers of an outsourced IT management company used by some private equity fund management firms have been hacked, resulting in the leakage of internal data.

    Read more...

    Know Your Breach: Fairmont Federal Credit Union

    The Target: A not-for-profit financial organization, Fairmont Federal Credit Union offers services such as business and home mortgage loans, financial first aid, and personal checking. It operates nine regional branches in West Virginia.

    The Take: The hackers stole files containing names, dates of birth, Social Security numbers, driver’s license numbers, government ID numbers, financial information, medical and health insurance information, and other personal data. More alarming is that the stolen information contains full credit card/debit card details, including card numbers, security codes/PIN numbers, and expiration dates. IRS PIN numbers, tax ID numbers, routing numbers, and full access credentials were also compromised in the data breach.

    The Vector: The organization discovered the cybersecurity incident on January 23, 2024 and launched a prompt and thorough forensic investigation, concluding on August 17, 2025, that files stolen from its network contained personal information.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Private Equity Circles Cyber Security as AI-Driven Threats and Defence Fuel Investment Surge

    2025-09-18

    Cyber Daily: Speaking to Cyber Daily’s sister brand, InvestorDaily, investment strategist at Betashares, Hugh Lam, said demand for security solutions has accelerated as geopolitical tensions and AI advancements reshape the risk landscape.

    Read more...

    VC Firm Insight Partners Says Thousands of Staff and Limited Partners had Personal Data Stolen in a Ransomware Attack

    2025-09-17

    TechCrunch: Venture capital firm Insight Partners has notified thousands of people, including the firm’s limited partners, that their personal information was stolen by hackers in an earlier data breach.

    Read more...

    Cybersecurity Firm Netskope Lifts IPO Price Range, Eyes $7.3 Billion Valuation

    2025-09-16

    Yahoo News: Cybersecurity firm Netskope is now aiming for a valuation of up to $7.26 billion in its U.S. initial public offering after raising the proposed price range, it said, underscoring investor appetite for high-growth tech stocks.

    Read more...

    Cybersecurity Market Is Projected To Reach US$552.35 Billion By 2031 With CAGR Of 13.8%

    2025-09-15

    PR Newswire: According to a new comprehensive report from The Insight Partners, the global cybersecurity market is observing significant growth owing to the rise in cyber threats and attacks, stringent government regulations and compliance, and a surge in need to protect business assets.

    Read more...

    CISA Audit Sparks Debate About Cybersecurity Pay Incentives

    2025-09-15

    Cybersecurity Dive: An audit that castigated the Cybersecurity and Infrastructure Security Agency’s cybersecurity pay incentives is worrying CISA staffers who say the report lacks context and could give the Trump administration an excuse to end a vital retention program.

    Read more...

    CrowdStrike and Meta Launch Benchmarks to Test AI in Cybersecurity

    2025-09-15

    Investing.com: CrowdStrike, the cybersecurity powerhouse whose stock has surged 68% over the past year and maintains a strong "Buy" rating from 38 analysts, partnered with Meta to introduce a new suite of benchmarks called CyberSOCEval to evaluate how artificial intelligence systems perform in real-world security operations.

    Read more...

    AI Threats Challenge Banks' Incident Response Strategies

    2025-09-15

    Bank Info Security: Financial institutions are facing a new wave of cyberthreats as attackers weaponize artificial intelligence to exploit insider vulnerabilities. Richard Cassidy, field CISO at Rubrik, said financial organizations risk severe consequences if they continue relying on outdated approaches to incident response.

    Read more...

    Know Your Breach: Workiva

    The Target: Workiva, a leading cloud-based SaaS (Software as a Service) provider.

    The Take: The threat actors exfiltrated a limited set of business contact information, including names, email addresses, phone numbers, and support ticket content.

    The Vector: Workiva notified its customers that attackers who gained access to a third-party customer relationship management (CRM) system stole some of their data.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    The Click That Costs Millions: Why Human Error Is Cybersecurity's Top Threat

    2025-09-11

    Forbes: For years, cybersecurity focused on perimeter defenses. Today, with hybrid work and the cloud being ubiquitous, the greatest threat isn't code; rather, it's the person holding the device.

    Read more...

    Firms, Reps Affected By CIRO Breach

    2025-09-09

    Investment Executive: The Canadian Investment Regulatory Organization (CIRO) confirmed that personal information about industry firms and registered reps was compromised in a cyber breach reported last month.

    Read more...

    Rising Tariff Worries, AI Use Puts Spotlight On FP&A, Protiviti Survey Finds

    2025-09-09

    CFO Dive: The importance of the FP&A function has captured greater attention as executive leaders globally continue to navigate a still-murky economic environment alongside the evolution of technologies such as AI.

    Read more...

    SentinelOne Announces Plans to Acquire Observo AI

    2025-09-08

    Dark Reading: Threat detection vendor SentinelOne announced plans to acquire Observo AI, which will boost the company's existing AI SIEM and security data offerings and focus on autonomous security operations.

    Read more...

    Ex-WhatsApp Cybersecurity Executive Says Meta Endangered Billions of Users in New Suit

    2025-09-08

    The Guardian: A former top cybersecurity executive at WhatsApp filed a lawsuit alleging that parent company Meta disregarded internal flaws in the app’s digital defenses and exposed billions of its users. 

    Read more...

    VC Giant Insight Partners Notifies Staff and Limited Partners After Data Breach

    2025-09-08

    TechCrunch: Venture capital firm Insight Partners says it has completed notifying a number of individuals, including the firm’s limited partners, whose personal information was stolen by hackers in a January data breach

    Read more...

    Cybersecurity Firm Netskope Eyes up to $6.5 Billion Valuation in US IPO

    2025-09-08

    MSN/Reuters: Netskope is seeking a valuation of up to $6.5 billion in its initial public offering in the United States, the cloud-based cybersecurity firm said, signaling investors' appetite for new listings.

    Read more...

    Know Your Breach: TransUnion

    The Target: TransUnion, one of America’s big three credit bureaus.

    The Take: Names, Social Security numbers and dates of birth were among the stolen information, according to the Texas filing.

    The Vector: TransUnion said "the incident involved unauthorized access to limited personal information for a very small percentage of U.S. consumers," adding, "we are working with law enforcement and have engaged third party cyber security experts for an independent forensics review."

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Q6 Cyber Receives Strategic Growth Investment from Charlesbank Technology Opportunities Fund

    2025-09-04

    Business Wire: Q6 Cyber (“Q6” or the “Company”), a leading threat intelligence platform focused on preventing fraud and financial crime, announced that it has received a strategic growth investment from Charlesbank Capital Partners (“Charlesbank”), a middle-market private investment firm.

    Read more...

    Pressure on CISOs to Stay Silent About Security Incidents Growing

    2025-09-04

    CSO Online: CISOs are coming under increased pressures to keep quiet about security incidents because concerns about corporate reputation often outweigh adherence to regulatory compliance.

    Read more...

    Anthropic Hits $183 Billion Valuation With $13 Billion Raise

    2025-09-03

    Bank Info Security: Anthropic obtained $13 billion in fresh capital, one of the largest single rounds ever for an artificial intelligence company, bringing its post-money valuation to $183 billion.

    Read more...

    Private Equity Firms Step Up Cyber Vigilance Amid Rising Threats

    2025-09-03

    Risk and Insurance: As cyberattacks grow in frequency and complexity, private equity (PE) firms are elevating cybersecurity from a back-office IT concern to a strategic priority. 

    Read more...

    Zscaler Sees Annual Revenue Above Estimates on Strength in Cybersecurity Demand

    2025-09-03

    MSN/Reuters: Zscaler forecast annual revenue above Wall Street estimates, betting on robust demand for its cybersecurity services as businesses upscale infrastructure to accommodate AI, sending its shares up 3% in extended trading.

    Read more...

    AI, Infrastructure And The Structural Priorities Of Venture Capital

    2025-09-02

    Forbes: July 2025 continued to demonstrate Silicon Valley’s resilience and sharpened investment focus. Public markets posted mixed results: The Nasdaq gained 3.40% and the S&P 500 rose 2.19%, while the Dow Jones slipped 0.68%.

    Read more...

    Hackers Breach Fintech Firm in Attempted $130 Million Bank Heist

    2025-09-02

    Bleeping Computer: Hackers tried to steal $130 million from Evertec’s Brazilian subsidiary Sinqia S.A.after gaining unauthorized access to its environment on the central bank’s real-time payment system (Pix).

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates