65,583,602 records breached and 127 incidents newly disclosed this week

Welcome to this week’s Security Spotlight, where we shine a light on:?

• Our weekly news round-up , featuring 65,583,602 records breached in 127 incidents?
• Our new complete guide to cyber incident response?
• 621,095,066 records breached in the USA in February?
• A new blog on Annex A of ISO 27001:2022 ?
• A new interview with Alan Calder on two recent changes around ISO 27001 ?
• ITGP’s highlights for March?
• A free mini podcast on ISO 27001:2022 and ISO 27002:2022?
• Two upcoming webinars, on ISO 27001 and security testing ?

Our research found 127 newly disclosed security incidents this week, accounting for 65,583,602 records known to have been breached.?

This week’s 3 biggest stories:?

1. Over 73 million records from alleged AT&T breach offered for sale?

A threat actor has listed 73,481,539 records on a dark web forum, claiming it to be from AT&T.?

AT&T has denied the breach since 2021. However, numerous researchers have confirmed the data does indeed relate to AT&T customers.?

2. France Travail and Cap Emploi breach affects 43 million?

Unemployment agencies France Travail and Cap Emploi have suffered a cyber attack, leading to the exposure of 43 million people’s data.?

3. HIBP adds almost 3.3 million ClickASnap records to its database?

In October 2022, ClickASnap announced it had suffered a data breach in September 2022. Have I Been Pwned has now added 3,262,980 records to its database.?

Read our full news round-up ?

??

A complete guide to cyber incident response?

Cliff Martin, head of incident response at GRCI Law, gives his expert insight into:?

• Prevention, detection and response?
• Cyber incident response plans?
• Staff training and incident responder skills?
• Internal expertise vs outsourcing?
• The importance of investigating root cause?
• Triage, containment, eradication, recovery, and other stages in the incident response process?

Read the full interview ?

?

621,095,066 records breached in the USA in February?

Our research found 322 publicly disclosed incidents in the USA last month, accounting for 621,095,066 known breached records.?

Discover the biggest breaches and most breached sectors in our full report . Plus, you can download our free Data Breach Dashboard.?

We also updated our Data Breaches and Cyber Attacks in 2024 in the USA page. So far, 700,095,520 records are known to have been breached this year.?

?

ISO 27001:2022 Annex A controls explained?

This new blog explains:?

• How Annex A works?
• The Annex A controls?
• How to select controls?
• What the SoA is?
• The difference between ISO 27002 and Annex A?

Read more ?

?

Q&A with Alan Calder on recent changes to ISO 27001?

ISO 27006, part of the ISO 27000 family, has been updated.?

Plus, an addendum to ISO 27001 was recently published.?

We asked Group CEO Alan Calder about the implications of these changes, as well as:?

• How he started his ISO 27001 journey?
• The business benefits of ISO 27001?
• Risk assessment and control selection?

Read the full interview ?

?

ITGP highlights for March?

ITGP recently participated in the London Book Fair and the Pink24 Annual International IT Service Management Conference & Exhibition.?

ITGP also announced a new publication on Europrivacy?/?.?

Read more ?

?

Free mini podcast: Steve Watkins on ISO 27001:2022 and ISO 27002:2022?

Are you ready to transition to ISO 27001:2022??

In this mini podcast, renowned ISO 27001 expert Steve Watkins discusses the 2022 editions of the Standards, and how they affect organisations.?

Listen now ?

?

Free webinar: ISO 27001 – the gateway to international cyber security recognition?

Tomorrow, 3:00 pm (GMT)?

Learn about the global importance of ISO 27001.?

This webinar covers:?

• ISO 27001’s role in achieving international recognition in cyber security and privacy management?
• Experiences from internationally recognised organisations?
• Strategies you can leverage to enhance your security posture on the international stage?

Attendees also get access to exclusive offers and discounts on consultancy and training services.?

Register now ?

?

Free webinar: Maximising security testing with ISO 27001 for US organisations?

Thursday, 28 March 2024, 3:00 pm (GMT)?

Learn how to integrate security testing with ISO 27001.?

This webinar covers:?

• The importance of testing for ISO 27001-certified organisations?
• How to scope in accordance with risk and get value for money?
• Best practices for security testing?

Register now ?

?

Speak to a cyber security expert?

With over 15 years’ experience in cyber security, we understand risk management.?

Our experts have implemented cyber security programmes for hundreds of organisations across a multitude of industries in both the private and public sectors.?

New to the world of cyber security and need advice on how to get started??

Or updating an existing cyber security programme??

Our cyber security experts are here to help.?

Get in touch ?

?