Nathan Harris

#CDK Files Notice of #Breach in Maine An interesting filing from CDK's outside counsel appeared over the weekend on the Maine AG's website. Maine, like many other states, requires notification of the state attorney general if a #breach occurs that affects Maine residents. This filing with the Maine AG states that an "external system breach (hacking)" event occurred at CDK on June 14, 2024, that was discovered on June 19, 2024, and that CDK has offered credit monitoring to affected individuals. The details are scarce, and this filing describes a very limited impact (affecting only one Maine resident, and 36 individuals in total), but it appears to be the first public acknowledgement of which we are aware from CDK that personally identifiable #data was #breached in June 2024. According to the CDK notice letter - https://lnkd.in/e2ffyWzf - the data involved included "Name, business or personal address, and business tax identification number or social security number." Exactly what this means is unclear.  The dates listed align with the CDK data breach incident in June 2024, but it is not clear how this apparently very limited breach event is linked to that broader event (if at all), why this was issued now*, what data was involved, whether there is any impact on any dealer data, or whether this is the first or last of such notices to be filed. *The notice letter is dated September 20, 2024, the date it appears to have been reported to the Maine AG was September 23, 2024, but was just posted on the Maine AG site over the weekend.

5

We spoke to code inspectors and professionals within the code enforcement industry to hear their top tips from their time in the field. Give us your suggestions in the comments, below! Read more, here. #CodeCouncil #BuildingSafety365

17

1 Comment

We're not just meeting compliance; we're setting the bar in #eDiscovery security!🔒 From achieving FedRAMP Authorization and three DoD ATO Impact Levels, implementing rigorous physical and network security measures, we ensure your information's confidentiality, integrity, and availability. Uncover the benefits of robust security frameworks for your operations in Kelly Swank's latest blog! ⬇️ https://hubs.la/Q02zKYly0 #CyberSecurity #DataProtection #LegalTech

3

Dive into Nebraska's new data privacy act with our high-level video below. 🍿 Get the latest news, laws, and tips, and check out our blog for full details to stay ahead (link in the comments). 👇 #PrivacyScoop #PrivacyUpdate #PrivacyNews #PrivacyTips #Privacy #BlogCast #Blog #PrivacyLaw #PrivacyLawUpdate‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍ #Nebraska ‍‍‍‍‍‍‍‍‍‍‍‍‍‍

9

1 Comment

Struggling with FedRAMP compliance complexities? Our recent blog demystifies the process and outlines the significant benefits for both federal agencies and enterprises ✅ Check out the full blog: https://hubs.la/Q02CvX1P0

12

The 404 recap this month with Travis, Leif, and Swathi: more breaches, thought pieces, is more regulation helpful, and more security news: -Sisense had a breach which could result in lateral movement to connected data sources -Cybersecurity is broken, what's the answer? -Microsoft will charge for Windows 10 security updates after EOS -A helpful collection of secure defaults for a variety of libraries -A zero day vulnerability was exploited since March in Palo Alto firewalls -Phishers are taking advantage of the Twitter to X domain name shift (what a surprise) Catch up on the spicy 🌶 discussion yourself: https://lnkd.in/e7Eaa6Ce

7

1 Comment

One of the best pieces of useful info out of this month's podcast: A collection of secure default libraries (thanks to friend of the show Clint) for app & infra security, broken down by language. Check it out to build securely without reinventing the wheel! ☸ https://lnkd.in/eWjQ39k8

5

No tricks, just treats! Join Mary Mack, CISSP, Tom O'Connor, Hon. Andrew Peck (ret.) & me on Halloween, this Thursday at 1pm ET for the #edrm #ediscovery #caselaw webinar! Check out this month's 6 cases here! https://lnkd.in/gbhWDGSv #litigation EDRM - Electronic Discovery Reference Model

4

The Personable 2024 AI Training Summit is less than a month away! This event at the National Press Club on May 15-16 in Washington, DC, is a must-attend for any public sector financial fraud investigator and leader. Join ScanWriter and top industry experts to share and discuss emerging financial fraud insights, training, and case studies. Session topics include: - Unlocking generative AI for financial investigators - Practical machine learning at scale in federal law enforcement - The legal and ethical considerations of using AI in financial investigations - Which AI technologies are most relevant to financial investigations - AI-driven big data analysis Don't miss this opportunity to shape the future of financial investigations in the public sector! Register now: https://bit.ly/446lzEB #AI #FinancialInvestigation #PublicSector #AIFraud

1

❓ Are you struggling to integrate AI into your existing systems without disrupting your daily operations? ❓ Does the fear of security risks hold you back from fully embracing AI solutions? These are common concerns, but they don’t have to be roadblocks. Our team of experts is here to guide you through these challenges and create a seamless, secure AI strategy tailored to your business. 🚀 Ready to take the next step? Contact us today for a complimentary Business AI Strategy call and find out how we can tailor these innovations to your specific needs. 👉 Read our latest blog https://bit.ly/3ANguGY #AI #Microsoft365 #BusinessGrowth #MSP #Innovation #Cybersecurity #CTShelp #Haily

1

Montana Independent Banks face unique challenges in IT management. Whether they have internal IT staff, outsourced vendors, or a combination of both, maintaining robust cybersecurity measures and ensuring compliance during audits is critical. ➡️Understanding the Importance of Cybersecurity One major issue is ensuring that cybersecurity audits are thorough and compliant. It's essential to have not only the right tools and plans in place but also a knowledgeable partner to assist with these audits. This helps ensure that all auditor requirements are met, safeguarding the bank’s operations and reputation. ➡️Internal IT vs. Third-Party Vendors An internal IT person has the advantage of knowing your network and systems inside out. However, there are risks if this key individual becomes unavailable due to illness or vacation. In contrast, a third-party vendor can offer the support of an entire team, which provides continuity and reduces the risk of disruptions. ➡️Practical Advice For banks evaluating their IT options, it’s worth considering the long-term benefits of having a team-based approach rather than relying on a single point of failure. A dedicated team can provide continuous support and expertise, helping to mitigate potential risks and ensure smooth operations. How do you handle IT disruptions, and what has been your biggest challenge in maintaining continuous IT support? #BanksAudit #ThirdPartySupport #MontanaIndependent #ChallengesManagement #InternalAudit #SupportTeam #AuditChallenges #RiskManagement

4

1 Comment

At #RSAC? Come find us upstairs in the Early Stage Expo on the second floor of Moscone South. Let’s chat about about how #JUDGE is available in AWS Marketplace or how you can: 1. *Observe* your build process to generate attestations, 2. *Manage* these attestations to optimize data usage, and 3. *Act* on this data to ensure compliance. #RSA

32

An email deletion policy can help limit your risk in the event of litigation or a breach, plus make eDiscovery more concentrated and less costly. Learn more here👇 #InfoGov #InfoMgmt #RecordsMgmt #eDiscovery #ContentMgmt #DataGov https://hubs.ly/Q02DvBD70

1

POV: you owe the SEC millions in regulatory fines $$$ Non-compliance got you down? Don’t catch yourself frowning like Brad Levy is here. Help protect your firm from costly penalties with Symphony’s Federation, the answer to your off-channel communication woes. Request a free demo: https://lnkd.in/eAGJY-TS #compliance #offchannelcommunication #Federation #Symphony

122

8 Comments

Legislation to improve federal agency oversight and management of software purchases passed the House on Wednesday, keeping top IT and software trade groups’ hopes alive that the bill will get through the Senate and become law before this congressional term is up. The Strengthening Agency Management and Oversight of Software Assets Act (H.R.1695) was introduced by Rep. Matt Cartwright, D-Pa., last year and co-sponsored by a bipartisan group of 20 House lawmakers. https://lnkd.in/eEZmBeKn

1

Looking forward to seeing the results of the EasyRetroFunding (libp2p-rPGF-1) by libp2p https://lnkd.in/gpWH6jgP #OrbitDB #Database #Privacy #Decentralization #libp2p

2