Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Inotiv

      The Target: Inotiv is an Indiana-based contract research organization specializing in drug development, discovery, and safety assessment, as well as live-animal research modeling.

      The Take: The compromised information, it told the Texas AGO, includes names, addresses, Social Security numbers, driver’s license numbers, ID numbers, credit or debit card numbers, medical and health insurance information, and dates of birth.

      The Vector: When it disclosed the incident, Inotiv said that the attack had disrupted business operations after some of its networks and systems (including databases and internal applications) were taken down.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      FINRA Flags GenAI, Cyber Fraud, and Sales Practices in 2026 Regulatory Agenda

      2025-12-09

      Investment News: FINRA has placed generative AI and cyber-enabled fraud high on its 2026 regulatory agenda, warning broker-dealers and RIAs that emerging technology and long‑standing compliance gaps are converging into higher risk for investors.

      Read more...

      More Than $2 Billion in Payments From 4,000 Ransomware Incidents Reported to Treasury in Recent Years

      2025-12-08

      The Record: The Treasury Department’s Financial Crimes Enforcement Network (FinCEN) released a study last week covering 4,194 ransomware incidents that were reported through the Bank Secrecy Act over the three-year period. 

      Read more...

      Resemble AI Raises $13 Million for AI Threat Detection

      2025-12-08

      SecurityWeek: Founded in 2019, California-based Resemble AI has built an AI detection platform that helps organizations identify AI-generated deepfakes and prevent fraud and other types of attacks.

      Read more...

      Blackstone CTO Says Data Leaks Keep Him Up At Night

      2025-12-03

      Yahoo News/Reuters: Blackstone's Chief Technology Officer ​is increasingly concerned about ‌data leaks and which platforms can help ‌manage safety, he told the Reuters NEXT conference in New York.

      Read more...

      Police Disrupt 'Cryptomixer,' Seize Millions in Crypto

      2025-12-01

      Dark Reading: Though many people believe cryptocurrency is untraceable, that, generally speaking, is far from the truth. When cybercriminals obtain cryptocurrency in, say, a ransomware attack, a key step in the process is mixing, or laundering, the crypto. 

      Read more...

      Know Your Breach: Comcast

      The Target: Comcast is an American mass media, telecommunications, and entertainment multinational company, and the fourth-largest telecom firm in the world by revenue, after AT&T, Verizon, and China Mobile.

      The Take: The threat actors stole personal and financial information between February 14 and February 26, including the names, addresses, Social Security numbers, dates of birth, and Comcast account numbers of affected current and former customers.

      The Vector: The breach occurred in February 2024, when attackers hacked into the systems of Financial Business and Consumer Solutions (FBCS), a debt collector Comcast had stopped using two years earlier.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      Account Takeover Fraud Caused $262 Million in Losses in 2025: FBI

      2025-11-26

      SecurityWeek: The threat actors were seen impersonating financial institutions to steal money or information from individuals, businesses, and organizations of different sizes, as over 5,100 complaints received by the agency show.

      Read more...

      SEC Orders Portland-Based Hybrid Firm To Pay $325K Over Cybersecurity Lapses

      2025-11-25

      Investment News: The Securities and Exchange Commission has levied a $325,000 penalty against M Holdings Securities for failing to maintain adequate cybersecurity safeguards across its nationwide network of member firms, marking the latest enforcement action targeting inadequate information security practices in the wealth management industry.

      Read more...

      US Banks Scramble to Assess Data Theft After Hackers Breach Financial Tech Firm

      2025-11-24

      TechCrunch: Several U.S. banking giants and mortgage lenders are reportedly scrambling to assess how much of their customers’ data was stolen during a cyberattack on a New York financial technology company earlier this month.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates