centrexIT

In April, the genomic and health data of 500,000 people went up for sale online. No firewall failed. The data had been shared legitimately with researchers, and it still ended up listed for anyone to buy.

That's the UK Biobank breach, and most people never heard about it. But no state has more to learn from it than California, where we hold more research IP than almost anywhere and share it with the same partners, CROs, and cloud platforms.

The lesson for any California business: your most valuable data is also your most shared data, and you can't reissue a genome. And here, a leak of genetic or health data carries real legal weight under California's privacy laws.

We wrote up what to take from it and what to check this quarter.

https://na2.hubs.ly/H05YMMH0

The World Cup kicks off June 11, and scammers have a head start. The FBI is warning about fake FIFA websites, and researchers have already counted more than 4,300 of them, including near-perfect copies with working login pages selling fake tickets, hotels, and streams.

Here's why it matters even if you'd never buy a ticket from a random link: your employees are fans, and they'll check scores and hunt for tickets on the same devices that stay logged into work. One reused password is all it takes.

We wrote up how this reaches your business and the one habit that stops most of it.

https://na2.hubs.ly/H05VFwn0

Keep your team working where they already are — not learning new software.

Business Central connects natively with Microsoft 365 so your people can:

- Create quotes and send invoices from Outlook
- Share real-time business data in Teams channels
- Edit in Excel and publish back with built-in validation

No new apps. No extra training. We can help you set this up so your team sees the difference right away.

https://microsoft.channext.com/centrexit/dynamics-365-business-central-2?lang=en_US&utm_source=fb&utm_term=39480

The Carnival breach exposed the personal information of nearly 6 million people, including passport and driver's license numbers. Here's the part that should get every business owner's attention: it didn't start with a hacker breaking through security software. It started with one employee being talked into trusting the wrong request.
That's social engineering, and it works on companies of every size because it targets people, not technology. The smaller your team, the more likely one person's account quietly has access to far more than it should.
We broke down what happened, why "we're too small to be a target" is backwards, and the five things any business can check this week.
https://na2.hubs.ly/H05S6cM0

Ask your IT provider one question: "What's on the same network as our EHR?"

The length of the pause usually tells you everything.
In a lot of practices, the answer includes infusion pumps, monitors, and imaging equipment — devices that store or transmit patient data, rarely get patched, and sit one hop away from every record you're responsible for protecting. Attackers know this. Unmanaged networked devices show up again and again in healthcare breach reports.

The fix isn't ripping anything out. It's segmentation, a current device inventory, and a patching plan that accounts for FDA re-approval rules. Boring, and exactly the kind of boring that keeps you off the breach notification list.

We wrote up what that looks like in practice: https://na2.hubs.ly/H05Qwl30
People-First. AI-Amplified.

Your privacy policy was probably generated by your website builder in 2018. The FTC has been clear: if you say you do one thing with customer data and actually do another, that's a problem they'll act on.

We broke down the FTC's recent enforcement actions — Avast, Rite Aid, X-Mode — and translated what they mean for a 20-person business that doesn't have a legal team or a CISO.

The good news: the operational steps are achievable. The hard part is deciding who owns this work going forward.

Full breakdown here:https://na2.hubs.ly/H05K-Ds0

Think AI needs a big tech team? Think again. 🤖

With Business Central, Copilot is built in and ready to use:
- Ask plain-language questions about your data
- Reconcile bank statements automatically
- Spot patterns you might miss
- Reduce data entry with auto-filled records

Businesses exploring AI now will lead in two years. We can help.

https://microsoft.channext.com/centrexit/dynamics-365-business-central-2?lang=en_US&utm_source=fb&utm_term=39477

GitHub is in the news today, and not in a good way.

If your team uses it for source control or CI/CD, take an hour today and audit who holds the keys. Personal access tokens, OAuth apps, deploy keys, Actions secrets, AI assistant integrations — all of it.

Most organizations have never done this audit. Not because they're careless — because the tooling sprawls quietly. A developer leaves; their tokens stay. A vendor trial ends; the OAuth connection doesn't.

Full plain-English checklist here: https://na2.hubs.ly/H05Fysh0

Is your business juggling finance in one place, sales in another, and inventory in a spreadsheet? That makes every answer an investigation.

Microsoft Business Central brings finance, sales, and inventory together on one platform so everyone works from the same data. Teams can access it anywhere, make faster decisions, and stop chasing information.

We can help you see how Business Central fits your organization.

https://microsoft.channext.com/centrexit/dynamics-365-business-central-2?lang=en_US&utm_source=fb&utm_term=39474