Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Farmers Insurance

      The Target: Farmers Insurance is a U.S.-based insurer that provides auto, home, life, and business insurance products. It operates through a network of agents and subsidiaries, serving more than 10 million households nationwide.

      The Take: The company says that its investigation determined that customers' names, addresses, dates of birth, driver's license numbers, and/or last four digits of Social Security numbers were stolen during the breach.

      The Vector: On May 30, 2025, one of Farmers' third-party vendors alerted Farmers to suspicious activity involving an unauthorized actor accessing one of the vendor's databases containing Farmers customer information.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      AI Now Powers Cybersecurity For 73% Of Firms Amid Rising Threats

      2025-08-28

      TechDay: A new report has found that almost three-quarters of organisations globally have already incorporated artificial intelligence (AI) into their cybersecurity defences.

      Read more...

      One in Four Firms Report Losing Above $1 Million in a Fraud Attack

      2025-08-27

      CFO Dive: The escalating risks underscore the need for increased coordination between cybersecurity and finance teams, according to the study.

      Read more...

      When Partners Become Cybersecurity Risks

      2025-08-27

      PYMNTS: When the British retailer Marks & Spencer (M&S) disclosed last year that a supplier breach had unleashed a ransomware attack, it was the kind of nightmare scenario every corporate board dreads.

      Read more...

      Anthropic Thwarts Hacker Attempts to Misuse Claude AI for Cybercrime

      2025-08-27

      Yahoo News/Reuters: Anthropic said it had detected and blocked hackers attempting to misuse its Claude AI system to write phishing emails, create malicious code and circumvent safety filters.

      Read more...

      Okta Raises Annual Forecasts on Surging Cybersecurity Tools Demand

      2025-08-26

      Yahoo Finance/Reuters: Cybersecurity company Okta raised annual revenue and profit forecasts, betting on growing demand for its identity verification tools as enterprises strengthen defenses against artificial intelligence-powered attacks.

      Read more...

      CISOs Grow More Concerned About Risk of Material Cyberattack

      2025-08-26

      Cybersecurity Dive: Chief information security officers are increasingly concerned about the risk of a cyberattack, and a growing number say they have experienced a material loss of data over the past year, according to a report released by Proofpoint.

      Read more...

      Cyber Moves From Back Office to Boardroom – and Investors Are Paying Attention

      2025-08-25

      TechRadar: A function that was once buried deep within IT departments, cyber security is now firmly making its way up the boardroom agenda. 72% of UK businesses now classify cyber security as a high priority, with that extending to 96% of large businesses.

      Read more...

      Know Your Breach: Workday

      The Target: Workday, the cloud-based software company providing human resources systems

      The Take: The threat actor was able to obtain what Workday described as “commonly available business contact information, like names, email addresses, and phone numbers,” which it speculated could be exploited “potentially to further their social engineering scams.”

      The Vector: In its statement, the company said it “recently identified that Workday had been targeted and threat actors were able to access some information from our third-party CRM platform,” although it did not identify which platform it uses.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      APRA Warns of Increased Cyber Attacks as Geopolitical Tensions Grow

      2025-08-21

      Cyber Daily: Following Prime Minister Anthony Albanese’s move to recognise the Palestinian state, and Israel’s response, hacktivists groups have already begun to make their mark on government agencies and education institutions.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates