Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Landmark Admin

      The Target: Landmark Admin is a third-party administrator for insurance companies, offering back-office services like new business processing and claims administration for large insurance carriers.

      The Take: The following information related to potentially impacted individuals may have been subject to unauthorized access: first name/initial and last name; address; Social Security number; tax identification number; driver's license number/state-issued identification card; passport number; financial account number; medical information; date of birth; health insurance policy number; and life and annuity policy information.

      The Vector: Landmark says it found evidence that the threat actor accessed some files during the attack that contained the personal information of 806,519 people.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      Cybersecurity Remains a Tick-The-Box Exercise Despite Jump in Cyberattacks and Ransom Payouts

      2024-10-31

      PR Newswire: With nearly a 10-percentage point jump in cyberattacks over the past year, Canadian business leaders rank cybersecurity as the No. 1 threat to their growth, finds a recent KPMG Private Enterprise™ survey. 

      Read more...

      UK’s CybaVerse Raises $1.4 Million to Expand Cybersecurity Team

      2024-10-29

      PYMNTS.com: U.K. cybersecurity firm CybaVerse is expanding its team after raising $1.4 million. The company announced the fundraise on its website, saying it would use the capital to speed the development of its platform and expand its team.

      Read more...

      Poor Vulnerability Management Could Indicate Larger Cyber Governance Issues, S&P Says

      2024-10-29

      Cybersecurity Dive: The recognition and remediation of software vulnerabilities has become an increasingly urgent issue in the cybersecurity community in recent years.

      Read more...

      Cybersecurity Firm Rapid7 Fields Buyout Interest, Sources Say

      2024-10-28

      US News: Rapid7, a cybersecurity firm with a market value of about $2.5 billion, is exploring options with its investment bankers after attracting acquisition interest from buyout firms, according to people familiar with the matter. 

      Read more...

      77% of CISOs Fear Next Big Breach Will Get Them Fired

      2024-10-28

      CSO Online: When security vendor Portnox reported in a survey that 77% of CISOs say they are either very or extremely worried about losing their job when the next big breach happens, it raised questions about how CISOs should perceive their value in the C-suite. 

      Read more...

      Delta Launches $500 Million Lawsuit Against CrowdStrike

      2024-10-28

      Dark Reading: Delta Air Lines is suing CrowdStrike to recover the $500 million in revenue it lost due to the CrowdStrike outage earlier this year, which led to an assortment of issues and disrupted businesses, airlines, healthcare providers, and more.

      Read more...

      Cyber Startup Armis Security Raises $200 Million At $4.2 Billion Valuation

      2024-10-28

      Crunchbase: Cybersecurity firm Armis Security closed a $200 million Series D led by Alkeon Capital and General Catalyst. The round boosts the company’s valuation nearly 25% to $4.2 billion. The San Francisco-based startup last raised  a $300 million private equity round in 2021 led by One Equity Partners at a $3.4 billion valuation.

      Read more...

      Know Your Breach: Transak

      The Target: One of the largest cryptocurrency infrastructure providers, Transak serves nearly six million users across 160 countries and 46 U.S. states.

      The Take: Names, birthdays, passports, driver’s license information and user selfies were leaked in the breach.

      The Vector: A “sophisticated phishing attack” granted the attacker access to an unnamed know-your-customer vendor Transak uses for document scanning and verification.

      As phishing actors continue to explore every potential abuse opportunity on legitimate service providers, novel security gaps constantly threaten to expose users to severe risks. It is essential not to rely solely on email protection solutions, and also scrutinize every email that lands on your inbox, look for inconsistencies, and double-check all claims made in those messages.

      Read more...

      CISA Proposes New Security Requirements for Businesses Exposed to Cyber Espionage

      2024-10-23

      CSO Online: The US Cybersecurity Infrastructure Security Agency (CISA) has proposed a set of security requirements to be fulfilled by organizations running sensitive business transactions with states posing national security and foreign policy threats to the US.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates