720-891-1663

‘Accidentally’ Deleting Evidence Costs JP Morgan Millions in Fines

The Securities and Exchange Commission is not happy with JP Morgan for accidentally deleting millions of emails related to it’s Chase Bank subsidiary. The company deleted something on the order of 47 million electronic communications records from almost 9,000 mailboxes covering the period January 1 to April 23, 2018. Many of these records were required […]

Continue reading → [DISPLAY_ACURAX_ICONS]

After FTX Collapses, Feds Go After Binance

Sam Bankman-Fried demonstrated what happens when you combine unfathomable amounts of money and no regulation. It isn’t pretty. Binance moves $12 billion a day and has no physical office. What could possibly go wrong? Since the SEC was asleep at the wheel when FTX collapsed, leaving a lot of customers high and dry – since […]

Continue reading → [DISPLAY_ACURAX_ICONS]

FTC Helps App Developers Understand Data Sharing

When I say “help”, I mean that only in the kindest of terms, such as placing the company under a 20 year monitoring program, among other assistance. In this case, a company called Easy Healthcare has a free ovulation tracking app. As most of you well know, if it is free, you are the product. […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Data Retention, Minimization and the Elephant in the Room

As U.S. states implement new second-generation privacy laws (there are currently 8 states – can you name all of them?), the rules regarding data retention are changing and you might want to be prepared – unless, of course, you enjoy spending tens of thousands of dollars on lawyers to defend yourself, hours being deposed and […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Google’s CISO Says Boards, CEOs Need to Ask These Questions

Cybersecurity and privacy are a key pillar of every company’s risk governance program – or at least should be. Alicja Cade, Director, Financial Services, Office of the CISO, Google Cloud suggests some questions Boards and CEOs should be asking about the company’s cybersecurity program. Here are some questions that she is recommending the Board gets […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Do You Think Your Customers Care WHY it Took You 2 Years to Tell Them Their Data was Breached?

This is a secondary problem of vendor cyber risk. The first problem is that you are dependent on a lot of vendors. You have to depend on those vendors. If they screw up, you get sued. And you lose customers. To make matters worse, when one of your vendors gets breached, you are only one […]

Continue reading → [DISPLAY_ACURAX_ICONS]