.png?width=200&height=78&name=CH%20Diligence%20(thicker%20line).png "CH Diligence (thicker line).png")
The Target: Car dealership company AutoCanada, which has 66 dealerships.
The Take: The data that has been exposed includes full names, addresses, dates of birth, payroll information, including salaries and bonuses, social insurance numbers, bank account numbers used for direct deposits, scans of government-issued identification documents, and any personal documents stored on a work computer or drives tied to a work computer.
The Vector: The threat actors published terabytes of data allegedly stolen from AutoCanada, including databases, NAS storage images, executives' information, financial documents, and HR data.
This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.
TechCrunch: As the volume of cyberattacks grows, there’s increasing interest from the corporate sector in tech to help automate responses to breaches. Per a 2023 survey from analytics firm Devo, 80% of security leaders expected expanded investments in security automation technology this year; most cited the tech’s potential to support cyber-threat mitigation.
The Guardian: A CrowdStrike senior executive apologized for causing a global software outage that ground the operations of hospitals, airports, payment systems and personal computers around the world to a halt in July.
BNN Bloomberg: Cybersecurity startup Wiz Inc. is in discussions to sell existing shares at a valuation as high as $20 billion, according to people with knowledge of the matter.
Yahoo Finance: One of the main drivers contributing to the growth of the cybersecurity insurance market is the increasing number of cyberattacks, which escalate in frequency and become more sophisticated.
Dark Reading: MoneyGram's systems and payment services are down due to a "cybersecurity issue," with no clear timeline as to when it will be back up and running once more. The money-wiring service's in-person and online payment systems have been down since Friday, Sept. 20.
PR Newswire: Cybersecurity is the top technology priority for the vast majority of organizations, but moving from aspiration to reality requires a top-to-bottom commitment that many companies have yet to make, according to new research released today by CompTIA, the nonprofit association for the technology industry and workforce.
Tech Monitor: The UK, the US, and Canada are set to collaborate on research, development, testing, and evaluation of technologies related to artificial intelligence (AI), cybersecurity, resilient systems, and information domain-related innovations.
The Target: Stillwater Mining Company, the owner of the only platinum and palladium mines in the U.S.
The Take: In addition to names and contact information, the hackers stole government ID information, passport numbers, Social Security numbers, tax ID numbers, birth certificates, financial information like bank account numbers and medical information like health plan numbers.
The Vector: Stillwater Mining Company told regulators that hackers breached company systems in the middle of June but the incident was only discovered on July 8. The investigation into the attack is ongoing, but the mining company said it was able to confirm the data breach on August 19.
This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.
BNN Bloomberg: The demand for comprehensive cybersecurity services is only going to keep growing as businesses face new threats on a daily basis, the head of Palo Alto Networks says.
PR Newswire: EQT is pleased to announce that the EQT Mid Market Europe fund ("EQT"), together with its co-shareholders, have agreed to sell Open Systems ("Company") to Swiss Post.
Yahoo Finance: Craig Newmark Philanthropies, in partnership with Wondros, has launched a national cybersecurity public service campaign to help Americans become more resilient against increasingly pervasive and sophisticated cyber threats.
Dark Reading: The rising cost of cyberattacks, including downtime, investigations, lawsuits, ransoms, and more are prompting cyber insurers to re-examine underwriting and encourage greater cyber resiliency in their customer bases.
Forbes: Cybersecurity has become a pivotal business imperative, transcending mere technical challenges. While many organizations still view cybersecurity as an IT issue, the reality is that it fundamentally impacts every facet of a business, from reputation and customer trust to regulatory compliance.
Yahoo Finance: A new study from Bain & Company and KLAS Research shows US healthcare providers and payers are boosting their investment in AI, cybersecurity, and other IT areas to support innovation and improve operations.
GlobeNewswire: The Artificial Intelligence (AI) in cybersecurity solutions is projected to continue to have significant growth in next several years. The alarming rise in cyberattacks shows the urgent need for robust cybersecurity measures.
The Target: Car rental company Avis
The Take: The scope of the stolen data varies depending on the customer, but the following information is potentially affected: name, email address, telephone number, date of birth, credit card number and expiration date, driver’s license number.
The Vector: The company detected unauthorized access to one of its business applications at the beginning of August. Avis has described the breach as ‘insider wrongdoing.’
This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.
PR Newswire: "According to the latest BCC Research study, the demand for "Cybersecurity: Technologies and Global Markets" is expected to grow from $229.3 billion in 2024 to $396.8 billion by the end of 2029, at a compound annual growth rate, or CAGR, of 11.6% from 2024 to 2029."
Forbes: More than a quarter (27%) of organizations have banned internal GenAI use, according to Cisco's 2024 Data Privacy Benchmark Report. This is due mainly to concerns over privacy and security.
Cybersecurity Dive: The global cybersecurity workforce grew just 0.1% year-over-year to an estimated 5.5 million people, reflecting a stall in the sector for the first time since 2019, ISC2 said in a report.
Insurance Business: Insurers and asset managers worldwide are significantly increasing their investment in cybersecurity, according to a new survey by Moody’s.
CSO Online: Managing cybersecurity and other technology risks will be top of mind for CIOs in 2025 across Australia and New Zealand (ANZ), with 82% of 109 respondents saying it is a key priority for next year, according to Gartner.
Think Advisor: A data breach that hit technology platform Infosys McCamish Systems last year affected over 6 million customers at several financial services firms, including T. Rowe Price Retirement Plan Services, according to filings with the Maine attorney general’s office.
AOL/Reuters: The U.S. Commerce Department said it is proposing to require detailed reporting requirements for advanced artificial intelligence developers and cloud computing providers to ensure the technologies are safe and can withstand cyberattacks.
The Target: CBIZ is a management consulting company that provides financial and benefits and insurance services to various organizations and individual customers.
The Take: Hackers stole information belonging to nearly 36,000 individuals, which includes: name, contact details, Social Security Number, date of birth/death, retiree health information, welfare plan information.
The Vector: The company informs that a threat actor exploited a vulnerability in one of its web pages and was able to steal customer data between June 2 and June 21.
This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.
GlobeNewswire: By leveraging advanced machine learning models, generative AI can anticipate and counteract cyberattacks by identifying patterns, predicting potential vulnerabilities, and even simulating attacks to test system defenses.
Yahoo Finance/Reuters: Zscaler shares tumbled about 16% following the cybersecurity firm's downbeat annual forecast, as macroeconomic challenges slowed spending by its customers.
Dark Reading: The recent arrest and indictment of Telegram CEO Pavel Durov in France will likely have little short-term impact on use of the platform among cybercriminals and nation-state backed hacking groups.
CSO Online: Aligning an organization’s appetite for risk with cybersecurity strategies is a critical challenge CISOs face, one that requires balancing technical controls and business needs.
Axios: Policymakers are preparing for two very different outcomes if former President Donald Trump wins a second term: A world where he overhauls the U.S. approach to defending against nation-state hacks — and another where he leaves everything exactly as it is.
FinTech Global: A recent study highlighted by ISACA points to a staggering 78% of industry professionals ranking the reputational impact as the paramount concern following cyberattacks.
SecurityWeek: In an updated SEC filing, Halliburton stopped short of confirming a ransomware extortion scheme but said the cyberattack caused significant disruptions and limitation of access to portions of its IT systems.
Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →
Montreal
1080 Côte du Beaver Hall, Suite 904
Montreal, QC
Canada, H2Z 1S8
+1-450-465-8880
Halifax
84 Chain Lake Drive, Suite 501
Halifax, NS
Canada, B3S 1A2
+1-902-429-8880
Manila
Ground Floor, Three E-com Center
Mall of Asia Complex
Pasay City, Metro Manila
Philippines 1300
Sydney
Level 36 Governor Phillip Tower
1 Farrer Place Sydney 2000
Australia
+61 (2) 8823 3370
Abu Dhabi
Floor No.15 Al Sarab Tower,
Adgm Square,
Al Maryah Island, Abu Dhabi, UAE
Tel: +971 (2) 694 8510
Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved.
Terms of Service and Privacy Policy