Tsaaro Weekly Privacy Newsletter
8th July, 2022

CLOUD COMPUTING & CYBERSECURITY

Cloud computing is a business strategy that is taking the world by storm. It is not only changing the way that businesses store and access their data but also how they operate. Cloud computing offers flexibility, data recovery, little or no maintenance, easy access, and a higher level of security. Even small and medium-sized operations can benefit from using the cloud. Healthcare organizations, for example, are utilizing the cloud to produce more individualized remedies for patients. The cloud is being used by financial institutions to support real-time fraud detection and prevention. In addition, video game developers are utilizing the cloud to provide online games to millions of players worldwide. 

Despite the obvious benefits of using cloud services, such as cost-effectiveness, reliability, and agility it presents its own set of obstacles for privacy enthusiasts. Organizations that rely on the cloud risk data breaches, API and interface hacking, compromised passwords, and authentication difficulties. Furthermore, there is a lack of transparency about the handling of sensitive data entrusted to the cloud provider. Security necessitates close scrutiny of cloud settings as well as company policy and practice.  

Companies are shifting more data to the cloud and storing it in more locations than ever before – public, private, and hybrid clouds, cloud storage environments, software-as-a-service applications, and so on, in the process they have lost track of where all of their apps and data or who all have access to their data and its potential usage which is the greatest challenge. Cloud services allow customers to acquire, store, and distribute massive amounts of data at a cheap cost. As a result, new business models have emerged. Increasing the number of users raises the risk. The evolving business model captures consumer data over time and, to a lesser extent, your profile data. This collecting of customer data is done without the consumer’s agreement and is even unbeknownst to the consumer. The low storage cost provided by cloud providers allows new growing firms to keep data indefinitely, giving them the ability to identify future uses for this data. The company may not have disclosed this prospective use of data when the data was collected. 

To Enhance data privacy cloud providers must adopt better rules and procedures, data privacy regulations must be improved, and consumers must be more vigilant.  

Some criteria must be established in order for customers to assess and access They must be more aware of the terms and services provided by cloud providers. Collaborated efforts should be made by all the stakeholders to protect data privacy because the benefits of cloud services outweigh its shortcoming.

Tsaaro Weekly Privacy Newsletter
8th July, 2022

CLOUD COMPUTING & CYBERSECURITY

Cloud computing is a business strategy that is taking the world by storm. It is not only changing the way that businesses store and access their data but also how they operate. Cloud computing offers flexibility, data recovery, little or no maintenance, easy access, and a higher level of security. Even small and medium-sized operations can benefit from using the cloud. Healthcare organizations, for example, are utilizing the cloud to produce more individualized remedies for patients. The cloud is being used by financial institutions to support real-time fraud detection and prevention. In addition, video game developers are utilizing the cloud to provide online games to millions of players worldwide. 

Despite the obvious benefits of using cloud services, such as cost-effectiveness, reliability, and agility it presents its own set of obstacles for privacy enthusiasts. Organizations that rely on the cloud risk data breaches, API and interface hacking, compromised passwords, and authentication difficulties. Furthermore, there is a lack of transparency about the handling of sensitive data entrusted to the cloud provider. Security necessitates close scrutiny of cloud settings as well as company policy and practice.  

Companies are shifting more data to the cloud and storing it in more locations than ever before – public, private, and hybrid clouds, cloud storage environments, software-as-a-service applications, and so on, in the process they have lost track of where all of their apps and data or who all have access to their data and its potential usage which is the greatest challenge. Cloud services allow customers to acquire, store, and distribute massive amounts of data at a cheap cost. As a result, new business models have emerged. Increasing the number of users raises the risk. The evolving business model captures consumer data over time and, to a lesser extent, your profile data. This collecting of customer data is done without the consumer’s agreement and is even unbeknownst to the consumer. The low storage cost provided by cloud providers allows new growing firms to keep data indefinitely, giving them the ability to identify future uses for this data. The company may not have disclosed this prospective use of data when the data was collected. 

To Enhance data privacy cloud providers must adopt better rules and procedures, data privacy regulations must be improved, and consumers must be more vigilant.  

Some criteria must be established in order for customers to assess and access They must be more aware of the terms and services provided by cloud providers. Collaborated efforts should be made by all the stakeholders to protect data privacy because the benefits of cloud services outweigh its shortcoming.

Major Privacy Updates of the Week

Revamping India's outdated data laws

Karnataka will have to wait a little longer for its cybersecurity policy because the government has decided to broaden its scope by including aspects dealt with by the e-governance and home departments as well.

Read More

Revamping India's outdated data laws

Karnataka will have to wait a little longer for its cybersecurity policy because the government has decided to broaden its scope by including aspects dealt with by the e-governance and home departments as well.

Read More

China records biggest ever database leak in history, 1 billion personal data breached

A hacker claims to have obtained a trove of personal information on one billion Chinese citizens from the Shanghai police, which, if true, would be one of the largest data breaches in history, according to tech experts. Last week, an anonymous internet user identified as “ChinaDan” posted on the hacker forum Breach Forums offering to sell more than 23 terabytes (TB) of data for 10 bitcoin, roughly $200,000.

Read more

China records biggest ever database leak in history, 1 billion personal data breached

A hacker claims to have obtained a trove of personal information on one billion Chinese citizens from the Shanghai police, which, if true, would be one of the largest data breaches in history, according to tech experts. Last week, an anonymous internet user identified as “ChinaDan” posted on the hacker forum Breach Forums offering to sell more than 23 terabytes (TB) of data for 10 bitcoin, roughly $200,000.

Read more

Data protection Bill puts Indian children at a disadvantage. Here's how

Currently, under the Personal Data Protection Bill, 2019, any child under the age of 18 must obtain consent from their parent(s) or guardian(s) in all cases where their data is processed on the internet. Furthermore, profiling based on children’s data is prohibited.

Read more

Data protection Bill puts Indian children at a disadvantage. Here's how

Currently, under the Personal Data Protection Bill, 2019, any child under the age of 18 must obtain consent from their parent(s) or guardian(s) in all cases where their data is processed on the internet. Furthermore, profiling based on children’s data is prohibited.

Read more

US eye clinic suffers data breach impacting 92,000 patients

A Missouri-based medical facility has notified US authorities of a data breach that affected more than 90,000 people. Despite the fact that the event actually happened in December 2021, Mattax Neu Prater Eye Center announced the breach towards the end of June.

The incident affected 92,361 people, according to HIPAA. According to Mattax Neu Prater, which offers both surgical and non-surgical therapy, the “third-party data security incident” may have led to unlawful access to some patients’ sensitive personal information.

Read more

US eye clinic suffers data breach impacting 92,000 patients

A Missouri-based medical facility has notified US authorities of a data breach that affected more than 90,000 people. Despite the fact that the event actually happened in December 2021, Mattax Neu Prater Eye Center announced the breach towards the end of June.

The incident affected 92,361 people, according to HIPAA. According to Mattax Neu Prater, which offers both surgical and non-surgical therapy, the “third-party data security incident” may have led to unlawful access to some patients’ sensitive personal information.

Read more

HackerOne employee stole data from bug bounty reports for financial gain

Details of an incident involving a former employee who, according to HackerOne, allegedly gained access to company data for personal financial advantage have been made public. The unidentified person sought to reveal the same vulnerabilities outside of the bug bounty platform using information gathered from security reports submitted to the platform. According to HackerOne, he had access to the data between April 4 and June 23, 2022.

Read more

HackerOne employee stole data from bug bounty reports for financial gain

Details of an incident involving a former employee who, according to HackerOne, allegedly gained access to company data for personal financial advantage have been made public. The unidentified person sought to reveal the same vulnerabilities outside of the bug bounty platform using information gathered from security reports submitted to the platform. According to HackerOne, he had access to the data between April 4 and June 23, 2022.

Read more

WEEKLY PRIVACY NEWSLETTER

Keep up to pace with this high-impact weekly privacy newsletter that
features significant data privacy updates, trends, and tools that can
help to make your life secure & easier every day!

*By clicking on subscribe, I agree to receive communications from Tsaaro