Home Depot Breach – By the Numbers

• 56 million cards at risk (compare to Target = 40 million)

• $62 million in estimated costs (compare to Target  =$146 million and counting)
• $27 million insurance coverage (compare to Target = $100 million in cover)
• Lawsuits filed – at least 1 in US and 1 in Canada
• Filed 8-K with Securities and Exchange Commission on September 8 (Took Target 2 months to file)

Lame Duck Cyber Legislation Preview from ML Strategies

In June, the Senate Homeland Security and Governmental Affairs Committee approved two cybersecurity measures, the National Cybersecurity Communications Integration Center Act and the Federal Information Security Modernization Act.  While the bills are bipartisan, introduced by HSGAC Chairman Tom Carper (D-DE) and Ranking Member Tom Coburn (R-OK), final passage is uncertain and could wait until next year. In July, the Senate Intelligence Committee approved S. 2588, the Cybersecurity Information Sharing Act, a bipartisan bill proposed by committee Chairwoman Dianne Feinstein (D-CA) and Ranking Member Saxby Chambliss (R-GA). Introduced by Rep. Jim Sensenbrenner (R-WI), the USA Freedom Act (H.R. 3361), amending the Foreign Intelligence Service Act of 1978, was approved in the House in May. A companion bill, S. 2685, was introduced by Senator Patrick Leahy (D-VT) and placed on the Senate calendar in July. Despite this legislative activity on cyber, it is possible that this issue will not be addressed during the lame duck, barring some triggering event.