On May 16, 2022, the U.S. Department of State, U.S. Department of Treasury, and the Federal Bureau of Investigation issued combined guidance on efforts by North Korean nationals to secure freelance engagements as remote information technology workers by posing as non-North Korea nationals.
Continue Reading U.S. Issues Guidance to Companies Warning of Cybersecurity and Sanctions Risks Posed by IT Workers Directed by North Korea
Russia
Russian Federal Security Service Reportedly Detains Members of REvil Ransomware Group
On January 14, 2022, the Russian Federal Security Service detained members of the REvil ransomware group at the request of the United States, according to public press reports.
…
Continue Reading Russian Federal Security Service Reportedly Detains Members of REvil Ransomware Group
Russia-Linked REvil Hackers and Their Affiliates Hit with Arrests by the U.S. and International Allies
On November 8, 2021, law enforcement agencies in both the United States and European Union announced that a series of actions, including a number of arrests, were taken against the Russia-linked ransomware group, “REvil.” …
Continue Reading Russia-Linked REvil Hackers and Their Affiliates Hit with Arrests by the U.S. and International Allies
Russia Adopts Increased Fines for Data Protection Violations
As reported by Russian law firm Alrud, on November 21, 2019, the Russian State Duma passed a bill that would increase the minimum fines that may be imposed for violations of Russia’s data protection laws.
Continue Reading Russia Adopts Increased Fines for Data Protection Violations
Attacks Targeting Oil and Gas Sector Renew Questions About Cybersecurity
Recent press reports indicate that a cyber attack disabled the third-party platform used by oil and gas pipeline company Energy Transfer Partners to exchange documents with other customers. This incident and others raise questions about cybersecurity across the U.S. pipeline network.
Continue Reading Attacks Targeting Oil and Gas Sector Renew Questions About Cybersecurity
U.S. Blames Russia for Cyber Attacks on Energy Infrastructure
On March 15, 2018, the Trump Administration took the unprecedented step of publicly blaming the Russian government for carrying out cyber attacks on American energy infrastructure.
Continue Reading U.S. Blames Russia for Cyber Attacks on Energy Infrastructure
Privacy and Information Security Law Blog’s Top 10 Posts of 2017
As 2017 comes to a close, read our top 10 posts of the year.
Continue Reading Privacy and Information Security Law Blog’s Top 10 Posts of 2017
New Data Processing Notice Requirements Take Effect in Russia
On August 22, 2017, the Russian privacy regulator announced that it had issued an order, effective immediately, revising notice protocols for companies that process personal data in Russia. …
Continue Reading New Data Processing Notice Requirements Take Effect in Russia
Russian Privacy Regulator Adds Countries to List of Nations with Sufficient Privacy Protections
On August 9, 2017, the Russian privacy regulator expanded its list of nations that provide sufficient privacy protections to allow transfers of personal data from Russia.
Continue Reading Russian Privacy Regulator Adds Countries to List of Nations with Sufficient Privacy Protections
New Data Protection Enforcement Provisions Take Effect in Russia
As reported in BNA Privacy Law Watch, on July 1, 2017, a new law took effect in Russia allowing for administrative enforcement actions and higher fines for violations of Russia’s data protection law.
Continue Reading New Data Protection Enforcement Provisions Take Effect in Russia