Emerald Financial Services, LLC (“Emerald Card”) reported a significant data breach affecting 793,626 cardholders on October 4, 2023. The breach was reported to the Attorney General of Montana and it was discovered that the data breach originated from a third-party vendor.
The third-party vendor in question had been using MOVEit, a widely used file-transfer software, through which an unauthorized party was able to access sensitive information.
The compromised data includes not just names and addresses but also personal identification information such as Social Security numbers, dates of birth, and driver’s license numbers. This broad scope of the breach raises serious concerns about potential misuse of this information.
While companies are taking measures to strengthen their cyber defense, this incident highlights that vulnerabilities can exist within their supply chain. This data breach at Emerald Card is a timely reminder for businesses to not only secure their own systems but also ensure that their third-party vendors follow stringent security protocols.
More information about the breach can be found in the full article on JD Supra.
Data breaches such as these underscore the need for robust data privacy legislation. Protecting consumers’ personal data must be a top priority for businesses and law firms alike given their responsibility in handling such sensitive information. It also raises the question if existing penalties for such breaches are deterrent enough for organizations to take adequate precautions.
While data privacy laws exist worldwide, the enforcement and implementation of these laws vary significantly among jurisdictions. Thus, there’s an enduring need for multinational corporations and global law firms to stay well-versed with the differences and complexities in data privacy laws across the globe.