html5-img
1 / 0

Steven D. Grimberg United States Attorney ’ s Office Northern District of Georgia

DATA SECURITY BREACHES. Steven D. Grimberg United States Attorney ’ s Office Northern District of Georgia. Cyber Criminals & Motivation. Terrorism. Terrorists. Nation-State. Criminals. Trade secrets. Military/Government secrets. Motivation. Money. Intellectual capital. Hacktivists.

emory
Download Presentation

Steven D. Grimberg United States Attorney ’ s Office Northern District of Georgia

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. DATA SECURITY BREACHES Steven D. Grimberg United States Attorney’s Office Northern District of Georgia
  2. Cyber Criminals & Motivation Terrorism Terrorists Nation-State Criminals Trade secrets Military/Government secrets Motivation Money Intellectual capital Hacktivists Ego “Hack”tivism Age / Skill Level
  3. How They Do It
  4. Federal Agents Coordinate with Prosecutors Focus On Electronic Evidence Secure Computers/Hardware Request to Search by Consent Electronic Search Warrants Determine suspect IP address Traditional Investigative Steps Search Warrant / Surveillance Undercover / Confidential informant Banking/Transaction Records Confession THE CRIMINAL INVESTIGATION
  5. Must navigate HIPAA and state privacy/data breach notification laws. Most data breach laws have law enforcement exceptions. HIPAA (45 C.F.R. § 164.412) – if notice would “impede a criminal investigation or cause damage to national security.” Obtain written statement from law enforcement specifying delay required. Document oral request and delay up to 30 days. DATA BREACH NOTIFICATION
  6. Minimize disruption to normal business operations Address issues re: theft of intellectual property Navigate HIPAA and state privacy/data breach notification laws Assess monetary loss and restitution issues Working With The Victim
  7. Disclosure to law enforcement is treated with discretion. BUT… …Prosecutions are public forums. DISCLOSURE BEWARE
  8. Steve Grimberg U.S. Attorney’s Office, ND GA 404-581-6367 Steven.Grimberg@usdoj.gov LET’S TALK
More Related