National Public Data files for bankruptcy, admits ‘hundreds of millions’ potentially affected

October 9, 2024 at 03:38PM National Public Data, a data brokerage in Florida, has filed for bankruptcy after a massive data breach potentially affecting hundreds of millions. Originally claiming 1.3 million were impacted, the true figure is higher. The company faces numerous lawsuits and regulatory challenges, with minimal assets to address liabilities. ### Meeting Takeaways: … Read more

Australia’s government spent the week boxing Big Tech

September 13, 2024 at 12:57AM Australian government spent the week reining in Big Tech. Prime Minister announced plans to set minimum age for social media and compel Big Tech to pay for linking to local content. Meta faced parliamentary questioning over use of Australians’ posts for AI training. Other laws introduced to address privacy breaches, … Read more

Uber fined $325 million for moving driver data from Europe to US

August 26, 2024 at 12:32PM The Dutch Data Protection Authority fined Uber Technologies Inc. and Uber B.V. €290,000,000 ($325 million) for GDPR violations. Based on the meeting notes, the Dutch Data Protection Authority has imposed a significant fine of €290,000,000 ($325 million) on Uber Technologies Inc. and Uber B.V. for GDPR violations. Full Article

Brazil Halts Meta’s AI Data Processing Amid Privacy Concerns

July 4, 2024 at 03:11AM Brazil’s data protection authority, ANPD, has temporarily banned Meta from using users’ personal data to train AI algorithms due to inadequate legal basis, lack of transparency, and risks to children. Meta must comply within five days or face fines. This mirrors pushback in the EU over AI training data. The … Read more

Canada’s London Drugs confirms ransomware attack after LockBit demands $25M

May 22, 2024 at 04:08PM Canadian pharmacy chain London Drugs confirmed that ransomware criminals stole corporate files, forcing closure of 79 locations. No patient or customer data compromise. Perpetrators demand $25 million, claim London Drugs offered $8 million. Company refuses to pay ransom and promises employees two years of credit monitoring. Ransomware crew LockBit disrupted … Read more

LockBit says they stole data in London Drugs ransomware attack

May 21, 2024 at 05:26PM The LockBit ransomware gang claimed responsibility for the cyberattack on Canadian pharmacy chain London Drugs and threatened to publish stolen data after failed negotiations. London Drugs confirmed that no customer or employee data was impacted and stated they will not pay the ransom. LockBit has a history of targeting high-profile … Read more

London Drugs pharmacy chain closes stores after cyberattack

April 29, 2024 at 01:20PM Canadian pharmacy chain London Drugs has closed all retail stores due to a cybersecurity incident. The company is investigating the cyberattack, and has hired external experts to assist in containment and investigation. London Drugs stated that it found no evidence of customer or employee data being impacted, and is advising … Read more

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

January 30, 2024 at 06:12AM The Italian data protection authority has accused OpenAI of violating GDPR laws regarding ChatGPT’s data collection, leading to a 30-day response window. Similar concerns arise with Google’s Bard chatbot, while Apple opposes proposed U.K. Investigatory Powers Act amendments, citing threats to user privacy and security updates. This ongoing issue highlights … Read more

Top 3 Data Breaches of 2023, and What Lies Ahead in 2024

January 29, 2024 at 10:06AM The rise of cloud migration, AI, and machine learning has accelerated data usage and storage, prompting heightened awareness of data security in 2023. Notably, the MOVEit breach affected over 62 million individuals, while the Indian Council of Medical Research and 23andMe breaches exposed significant data and heightened sensitivity. Accountability and … Read more

Top 3 Priorities for CISOs in 2024

January 19, 2024 at 05:24PM In 2024, CISOs are facing increased personal and legal responsibility for data breaches, particularly due to new SEC regulations. To protect themselves, they should create a system record, define “materiality,” speak to the board in financial terms, participate in cyber insurance negotiations, and monitor emerging privacy threats. Managing third-party risks … Read more