
New York Attorney General Letitia James (pictured) just announced a $500,000 settlement with auto insurance company Noblr following a data breach that compromised the personal information of more than 80,000 New Yorkers.
The breach was part of a broader scheme where scammers exploited vulnerabilities in online automobile insurance quoting applications to access sensitive data, including driver's license numbers and dates of birth. This information was subsequently used to file fraudulent unemployment claims during the height of the COVID-19 pandemic.
Noblr's online quoting tool exposed full, plaintext driver's license numbers in several ways, including on the backend of its website and in PDFs generated during purchases. Notably, Noblr did not offer insurance products in New York but failed to block users from entering the personal information of New York residents, thereby broadening the scope of the breach.
This incident underscores the critical importance of robust security and cybersecurity measures for businesses handling sensitive customer information. The financial penalties and reputational damage resulting from such breaches can be significant, as evidenced by Noblr's settlement.
To mitigate these risks, businesses are increasingly turning to Managed Service Providers (MSPs) specializing in cybersecurity. MSPs offer comprehensive solutions, including continuous network monitoring, threat detection, incident response, and employee training, to proactively defend against potential breaches.
This particular incident goes beyond cybersecurity as it exposed personally identifiable information without the need to use traditional hacking tools.
Apex Technology Services, a leading MSP, provides tailored cybersecurity solutions designed to protect businesses from evolving cyber threats. Their expertise ensures that companies can maintain the security, confidentiality, and integrity of private information, thereby avoiding the pitfalls experienced by Noblr.
Investing in professional cybersecurity services not only helps prevent data breaches but also ensures compliance with industry regulations, avoiding hefty fines and legal complications. In an era where cyber threats are increasingly sophisticated, entrusting your company's cybersecurity to experts like Apex Technology Services is a prudent decision to protect your business and its stakeholders.