The HIPAA Journal reports cycle management firm MedData agreed to pay USD7 million to settle a class-action lawsuit related to a data breach. The lawsuit involved an incident where the data of 136,000 people was exposed after an employee allegedly uploaded the information to a public-facing website....

A significant amount of U.N. Development Programme data related to its staff and internal operations was stolen in a ransomware attack, CyberScoop reports. While the agency did not detail what types of data was stolen, hackers reportedly were able to "access a number of servers" that contained "a la...

Nunavut's Office of the Information and Privacy Commissioner filed a report calling on the provincial government to take measures to shore up a new mailing system in the city of Iqaluit, CBC News reports. The report looked at the potential privacy impacts on the city's 8,000 residents as it relates ...

Rarely has a European Data Protection Board plenary generated so much aggravation and heated opinions as what we are seeing this week. The EDPB issued its opinion on the pay-or-consent models being deployed by large online platforms as a legal construct to support behavioral advertising. This follo...

Ransomware group RansomHub claimed it is selling U.S. citizen's medical and financial records following a cyberattack on Change Healthcare, Wired reports. Emsisoft Threat Analyst Brett Callow said it is likely an attempt to collect additional ransom payments from the health care companies involved i...