A recent case made it clear that under Federal Rule of Evidence 803(6) there was no “absolute right to admission of emails under the business records exception.” In Roberts Technology Group, Inc. v. Curwood, Inc., No. 14-5677, 2016 U.S. Dist. LEXIS 64538 (E.D. Pa. May 17, 2016) the court

Continue Reading Sure there are a kazillion eMails, but eMails are not automatically admitted as evidence!

According to Pew “44 percent of Americans read or watch news on Facebook” so you might be interested to see the August 24, 2016 New York Times article entitled “Inside Facebook’s (Totally Insane, Unintentionally Gigantic, Hyperpartisan) Political-Media Machine” which highlights Facebook political activities.  The article included these comments

Continue Reading Duh! Do you think Facebook is influencing politics?

A recent report indicated that IRPs “are frequently developed from within departmental silos, for example, within the organization’s IT security function, and do not address the considerations of business units or cross functional areas needed to coordinate and operate together during a response. This not only leads to an uncoordinated

Continue Reading Cyber Pain Points: Failure to get buy-in for Incident Response Plan (IRP) in the top 10!

No surprises in a recent report that “cybercriminals utilize all forms of intelligence to exploit the weakest link as an attack vector…” and as result “almost every business is a target for malicious cyber attacks and the need for cyber security is an important part of protecting an organization’s reputation

Continue Reading How does FUD (Fear, Uncertainty, and Doubt) help businesses learn about cyber threat intelligence?

With 4 million patient records exposed, this was the largest fine to date for breach of ePHI (electronic Protected Health Information) which included “demographic information, clinical information, health insurance information, patient names, addresses, credit card numbers and their expiration dates, and dates of birth.”  On August 4, 2016 the U.S.

Continue Reading HIPAA penalty of $5.5 million seems like a lot, but it’s only $1.375 per patient!

Even though “…Yandex retains more than 50 percent of the market for internet search, according to industry statistics”, Russia fined Google because “Google’s rivals had not been able to include their own offerings, like digital maps or search.”  Little surprise that the New York Times reported that Google’s denied of

Continue Reading Russia fines Google $6.8 million for Android antritrust violation!

The New York Times reported “at least 858 cancellations and 7,359 delays across the global industry on Monday morning” in less than 5 hours based on a power outage at 2:30am EDT. But Delta’s story does not pass the smell test following Southwest Airlines’ recent claim of a single point

Continue Reading Delta Airlines – Cyberattack or power failure – seems a lot like Southwest’ alleged router failure?

Ponemon reported that “over the past two years the average cost of a data breach for healthcare organizations is estimated to be more than $2.2 million. No healthcare organization, regardless of size, is immune from data breach.”  The “Sixth Annual Benchmark Study on Privacy & Security of Healthcare Data

Continue Reading Cybercriminal data breaches in Healthcare may exceed a whopping $6.2 billion!

The HIPAA violation in violation of a Business Associate Agreement (BAA)  resulted from extensive PHI on an iPhone which “included social security numbers, information regarding diagnosis and treatment, medical procedures, names of family members and legal guardians, and medication information” according to a recent report from the Office for Civil

Continue Reading Unencrypted PHI (Protected Health Information) on iPhone leads to $650,000 HIPAA penalty!