David Johnson

𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗔𝗳𝗳𝗲𝗰𝘁𝗶𝗻𝗴 𝗡𝗲𝗶𝗺𝗮𝗻 𝗠𝗮𝗿𝗰𝘂𝘀 𝗚𝗿𝗼𝘂𝗽 - 𝟲𝟰,𝟰𝟳𝟮 𝗜𝗺𝗽𝗮𝗰𝘁𝗲𝗱 𝗜𝗻𝗱𝗶𝘃𝗶𝗱𝘂𝗮𝗹𝘀 𝘉𝘺 𝘔𝘪𝘵𝘤𝘩 𝘔𝘢𝘨𝘢𝘳𝘪𝘯, 𝘊𝘺𝘛𝘦𝘤𝘩 𝘕𝘦𝘸𝘴 𝘙𝘰𝘰𝘮 On June 24, 2024, the Neiman Marcus Group (NMG) reported a data breach to the Office of the Maine Attorney General in Maine, detailing the incident as an external system breach, commonly referred to as data breach, which impacted 64,472 individuals. The data breach took place on April 14, 2024, but was only detected on May 24, 2024, as stated in the data breach notification. Affected individuals were notified through a letter. “We are writing to notify you of an issue that involves certain of your personal information. In May 2024, we learned that, between April and May 2024, an unauthorized third party gained access to a database platform used by Neiman Marcus Group. Based on our investigation, the unauthorized third party obtained certain personal information stored in the database platform. The types of personal information affected varied by individual, and included information such as name, contact information, date of birth, and Neiman Marcus or Bergdorf Goodman gift card number(s) (without gift card PINs).” (Darcy Penick, President of Bergdorf Goodman and Head of NMG Product & Technology President of NMG, personal communication, July 24, 2024) The Neiman Marcus Group, based in Dallas, Texas, is a leading multi-brand luxury retailer in the U.S., known for delivering the world’s most desired brands to the true luxury customer in stores, online, and through remote selling. The group's flagship brands include Neiman Marcus and Bergdorf Goodman, that provide a curated product assortment, luxury services, and exclusive activations for customers in pursuit of the extraordinary. NMG is revolutionizing luxury experiences for their customers, brand partners, communities, and associates through their relationship business. After the incident, a notice regarding the data security breach at NMG was published on their website for customers to be informed. “Promptly after learning of the issue, we took steps to contain it, including by disabling access to the database platform. We also launched an investigation with the assistance of leading cybersecurity experts and are coordinating with law enforcement. We will continue to enhance our safeguards for protecting personal information,” NMG stated. #CyTech #CyberNews #CyberSecurity #CISO #CISOWorkplace #DataBreach #NeimanMarcusGroup

7

Here's a quick tip from Virgil Capollari of Adaptive Risk Strategies on the role that cybersecurity plays in managing insider threats. You can watch the full webinar here: https://bit.ly/3Y9MRsn #cybersecurity #insiderrisk #insiderthreat #risk #workforcemanagement #informationsecurity #infosec #security #DLP #riskindicators

3

Recent industry incidents underscore the critical importance of robust Business Impact Analysis (BIA) and Third-Party Risk Management (TPRM). Join CISO Russell Teague this Wednesday for a live Q&A session and a discussion around building tailored Business Impact Analysis (BIA) and Third-Party Risk Management (TPRM) strategies. Register now: https://hubs.ly/Q02MYnwS0 #HealthcareIT #CyberResilience #RiskManagement

15

1 Comment

In this short video clip of our CEO, Dennis Underwood, presents "Lies, More Lies, and Ransomware Statistics" at the BSides Security Pittsburgh. Hear him take a deeper look into the typical victim profiles for ransomware attacks, how the attackers work, and methods, too! 💡 ⠀ Catch the full presentation here 👉🏼 https://lnkd.in/e4rU22ih ⠀ #Hackers #Ransomware #RansomwarePrevention #CyberAttacks #Cybersecurity

4

With adversaries skilled at evading conventional cybersecurity stacks, it’s time for a change. Join Lumu Technologies at the Massachusetts Public Sector Cybersecurity Summit to see how we support local government agencies stay steps ahead with automated threat detection and real-time responses. >> https://zurl.co/AFlo #Cybersecurity #Technology #Local #Government #GovTechLive

11

1 Comment

Ditch the audit mentality for PCI DSS assessments. If your assessor acts like an auditor, it's time to say goodbye 👋 Payment security evangelist Andrew Henwood reveals why a collaborative approach is better 👇 #pcidss #paymentsecurity #infosec

8

Government agencies are navigating heightened cyber risks, requiring a more strategic approach to security. Visit the Lumu Technologies team at the Massachusetts Public Sector Cybersecurity Summit to learn how we enable real-time responses to cyberattacks. >> https://zurl.co/AFlo #Cybersecurity #Technology #Local #Government #GovTechLive

14

1 Comment

"Catholic Medical Center (CMC) in Manchester, New Hampshire, revealed on Monday that nearly 2,792 patients may have had their personal and health information compromised in a third-party data security incident.  The announcement comes amidst financial challenges faced by CMC, which recently laid off 54 employees and reduced hours for others. The CMC data breach is attributed to a vendor providing account receivable management services to CMC.  An unauthorized party accessed an employee email account through a phishing attempt." It only takes ONE CLICK for the damage to be done. It's time for change. It's time for PhishCloud Inc. PhishCloud arms employees with the tools they need to clearly spot and avoid #phishingattacks, across all digital platforms – not just email – letting them Click With Confidence. PhishCloud gives your security team the real-time visibility and control they need to see and block #phishing attacks your employees see. And with real-time metrics, you no longer need to rely on simulations and reporting to understand your phishing risk. And PhishCloud delivers reality-based training that imparts real knowledge, not just awareness. Sound too good to be true? Give us 15 minutes to show you the power of PhishCloud Inc.. #technology #innovation #informationsecurity #phishingattackprevention https://lnkd.in/dwmu5ZCb

1

"Catholic Medical Center (CMC) in Manchester, New Hampshire, revealed on Monday that nearly 2,792 patients may have had their personal and health information compromised in a third-party data security incident.  The announcement comes amidst financial challenges faced by CMC, which recently laid off 54 employees and reduced hours for others. The CMC data breach is attributed to a vendor providing account receivable management services to CMC.  An unauthorized party accessed an employee email account through a phishing attempt." It only takes ONE CLICK for the damage to be done. It's time for change. It's time for PhishCloud Inc. PhishCloud arms employees with the tools they need to clearly spot and avoid #phishingattacks, across all digital platforms – not just email – letting them Click With Confidence. PhishCloud gives your security team the real-time visibility and control they need to see and block #phishing attacks your employees see. And with real-time metrics, you no longer need to rely on simulations and reporting to understand your phishing risk. And PhishCloud delivers reality-based training that imparts real knowledge, not just awareness. Sound too good to be true? Give us 15 minutes to show you the power of PhishCloud Inc.. #technology #innovation #informationsecurity #phishingattackprevention https://lnkd.in/dwmu5ZCb

1

Exciting news for CISOs in New England! Introducing BostonCISO, the newest chapter of Inspire Leadership Network, expanding the premier peer network for top cybersecurity leaders across the region. If you know a CISO in New England please share the network with them. Learn more at: bostonciso.org #CISO #CybersecurityLeadership #InspireLeadershipNetwork

19

3 Comments

Exciting news for CISOs in New England! Announcing BostonCISO, the newest chapter of Inspire Leadership Network, expanding the premier peer network for top cybersecurity leaders across the region. If you know a CISO in New England please share the network with them. Learn more at: bostonciso.org #CISO #CybersecurityLeadership #InspireLeadershipNetwork

14

The demand for cyber insurance is increasing, adding to the list of responsibilities for CISOs. In her latest piece for CSO Online, Mary K. Pratt reports on the rise of cyber insurance, citing the threat landscape as the most significant driver. CISO Nicholas Kathmann provides expert commentary, noting that the high cost of incident response is also a main driver. Read his insights and more here: https://lnkd.in/gvF2GUtf #GRC #RiskManagement #CyberInsurance #ThreatLandscape #CISO

13

The #CrowdStrike-caused global #IT outage will be a key test for cyber #insurance underwriters >> https://buff.ly/4fiqWWE #tech #cybersecurity #cyberinsurance #insurers #cyberrisk #risk #riskmanagement #cyberattacks #business #leaders #leadership #management #CISO #CIO #CTO #CFO #CEO

4

The #CrowdStrike-caused global #IT outage will be a key test for cyber #insurance underwriters >> https://buff.ly/4fiqWWE #tech #cybersecurity #cyberinsurance #insurers #cyberrisk #risk #riskmanagement #cyberattacks #business #leaders #leadership #management #CISO #CIO #CTO #CFO #CEO

3

As the stakes of cyberattacks continue to rise, addressing #HumanRisk is crucial—it's not just about training, but about building a robust culture of #cybersecurity. Masha Sedova discusses how to effectively tackle human-related vulnerabilities to strengthen your organization’s defenses. Full article via Dark Reading here: https://ow.ly/nxR550SNmC6

60

1 Comment

In this short video clip of our CEO, Dennis Underwood, presenting "Lies, More Lies, and Ransomware Statistics" at the BSides Security Pittsburgh event some years back, we take a deeper look into the typical victim profiles for ransomware attacks and how the attackers work on scales of ransomware amounts, and also methods, too! 💡 ⠀ Catch the full presentation, here 👉🏼 https://lnkd.in/e4rU22ih ⠀ #Hackers #Ransomware #RansomwarePrevention #CyberAttacks #Cybersecurity

6