According to the Secret Service, APT41 is a “Chinese state-sponsored, cyberthreat group that is highly adept at conducting espionage missions and financial crimes for personal gain.” While experts are uncertain regarding whether the breach by APT41 was ordered by the PRC government or merely tolerated, the Secret Service announcement marks the first public confirmation by a federal agency of a state-affiliated hacking group breaching U.S. The Secret Service has reported that APT41, a hacking organization, stole roughly $20 million in federal COVID-19 relief funds by obtaining access to the computer systems of a number of U.S.

Theft of Federal Funds Highlights Expanding Cyber Threat from Foreign Actorsįrom Left to Right: John P. This entry was posted in Artificial Intelligence, California Consumer Privacy Act (CCPA), Compliance, Consumer Protection, Criminal Enforcement, Cybercrime & Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Data Privacy, Enforcement, Federal Trade Commission (FTC), General Data Protection Regulation (GDPR), Health Care, National Security, New York Department of Financial Services (NYDFS), New York State Law, Privacy, Ransomware, Reporting, Risk Management, Securities and Exchange Commission (SEC), Technology, U.S. We predict a continued flurry of activity in 2024. Amidst all of the noise, we break down below ten key developments of 2023 that contributed to an increasingly complex legal and data security landscape and prompted business leaders to increase resources and attention to bolster their defenses and ensure compliance with their growing list of legal obligations. At the same time, these teams are navigating how to harness the burgeoning potential of rapidly evolving artificial intelligence applications while mitigating associated security, legal, and related risks. And 2023 delivered, with both threat actors and regulators presenting new challenges for technology and legal teams. Photos courtesy of Paul, Weiss, Rifkind, Wharton & Garrison LLP.Īt the beginning of the year, we predicted that the use of personal information and the protection of data in an evolving threat environment would be the focus of increased legislation, regulation, and regulatory enforcement.

Richard finch cyber justice