Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Philadelphia Indemnity Insurance

    The Target: Philadelphia Indemnity Insurance designs, markets, and underwrites commercial property/casualty and professional liability insurance products.

    The Take: Philadelphia Indemnity launched an investigation and determined by July 9 that the stolen data included names, driver’s license numbers and dates of birth, according to the breach notice.

    The Vector: An unauthorized party accessed customer data during an intrusion discovered between June 9 and June 10, according to the disclosure. The company previously called the incident a network outage, however it said there was no ransomware and no encryption.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Costs of Data Breaches Dropping Globally But Not In Canada: IBM Study

    2025-07-30

    BNN Bloomberg: The average cost of a breach between March 2024 and February 2025 was $6.4 million, down from $6.6 million a year earlier, showed research released from technology giant IBM and the Ponemon Institute, a U.S.-based cybersecurity research centre.

    Read more...

    Australian Firms Unify Cybersecurity as Threats Increase

    2025-07-30

    Yahoo Finance: A growing number of enterprises in Australia are taking a centralized, cloud-based approach to cybersecurity amid rising threats, many of which involve AI, according to a new research report published today by Information Services Group (ISG), a global AI-centered technology research and advisory firm.

    Read more...

    Palo Alto Networks Stock Falls After Announcing $25 Billion CyberArk Deal

    2025-07-30

    CNBC: CyberArk shareholders, for each of their shares, will get $45 cash and 2.2005 shares of Palo Alto. The deal is expected to close during Palo Alto Networks’ fiscal 2026.

    Read more...

    Banks Struggle to Adopt Generative AI as Cybersecurity Concerns Linger

    2025-07-29

    Korea Times: Commercial lenders are finding it difficult to fully integrate generative artificial intelligence (AI) technologies into their financial services, impeded by the current regulation that prohibits the use of full, unencrypted personal credit information, market watchers said.

    Read more...

    AXA XL Launches Exclusive Cybersecurity Assessments In Partnership With Fenix24

    2025-07-29

    PR Newswire: AXA XL, a leading provider of cyber insurance, is proud to announce the launch of a new suite of proactive cybersecurity assessment offerings for its cyber policyholders in North America, in collaboration with Fenix24, a global leader in ransomware response and recovery.

    Read more...

    Allianz Life Discloses Massive Data Breach Linked To Supply-Chain Attack

    2025-07-28

    Cybersecurity Dive: Allianz Life Insurance Company of North America disclosed a massive data breach affecting most of the firm’s 1.4 million U.S. customers, professionals and select employees.

    Read more...

    Trump’s Cybersecurity Cuts Putting Nation At Risk, Warns New York Cyber Chief

    2025-07-28

    TechCrunch: During the first few months of the new Trump administration, the White House slashed cybersecurity budgets, staff, and initiatives. And some, including cybersecurity experts and legislators, are not happy about it.

    Read more...

    Know Your Breach: Ahold Delhaize

    The Target: Ahold Delhaize, one of the world's largest food retail chains. The multinational retailer and wholesale company operates over 9,400 local stores across Europe, the United States, and Indonesia, employing more than 393,000 people and serving approximately 60 million customers each week in-store and online.

    The Take: The company added that the stolen items vary for each affected individual and that the stolen documents contain a combination of personal information such as name, contact information, financial account information, health information and employment-related information.

    The Vector: In a filing with Maine's Attorney General, the retail giant revealed that the attackers behind the November breach stole the data of 2,242,521 individuals after gaining access to the company's internal U.S. business systems on November 6, 2024.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    Canadian Hedge Fund Waratah Capital Reveals Data Breach

    2025-07-23

    Hedge Week: The Globe and Mail report cites the firm as revealing the breach in a letter to investors this week, stating that an unauthorised party accessed data through a third-party IT provider, rather than directly penetrating Waratah’s internal network.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates