The U.S. Health and Human Services Office for Civil Rights reached a $1.25 million settlement with Arizona-based health care provider Banner Health Affiliated Covered Entities over alleged violations of the Health Insurance Portability and Accountability Act Security Rule. The settlement resolves 20...

The Office of the Information and Privacy Commissioner for British Columbia announced new requirements for privacy management programs and data breach reporting under the Freedom of Information and Protection of Privacy Act that entered into force Feb. 1. Covered entities are required to designate "...

Google Fi, a mobile virtual network operator, reported a third-party system was breached that stored “a limited amount” of customer data, InfoSecurity Magazine reports. Stolen data reportedly included account activation dates, information about specific mobile plans and SIM card serial numbers. Info...

The BBC reports 10 million customers of U.K. sportswear chain JD Sports had their data exposed in a cyberattack. The breach reportedly affected online sales data from 2018-2020, including personally identifiable information. JD Sports representatives said they were contacting affected customers, wor...

Hackers stole customers' encrypted data during a November 2022 security breach of GoTo, the parent company of password manager LastPass, CNET reports. The breach was a direct result of an August 2022 breach, in which an “unauthorized party” accessed a shared GoTo-LastPass cloud storage service. In N...