September 4, 2024 at 05:18AM The Dutch Data Protection Authority has fined Clearview AI €30.5 million for violating the GDPR by creating an “illegal database” of billions of facial photos without consent. Clearview faces further penalties if it doesn’t cease violations. The company claims it isn’t subject to EU regulations, but the Dutch DPA is … Read more
September 3, 2024 at 05:24PM Columbus, Ohio, faced a ransomware attack and subsequently sued a researcher who alleged that the breach was greater than disclosed. The city initially reported stopping the attack, but the Rhysida ransomware gang later leaked 3.1TB of data stolen from the city’s systems. The city also accused the researcher of colluding … Read more
September 3, 2024 at 06:51AM The City of Columbus, Ohio, initially downplayed the impact of a ransomware attack in July. Subsequently, the city sued a researcher, David Leroy Ross, for disclosing the extent of the incident. Ross revealed that the attack was more significant than reported and shared stolen data, causing the city to offer … Read more
August 20, 2024 at 10:39AM FlightAware recently admitted to exposing users’ data for over three years in a configuration error. Personal data including user ID, password, email, addresses, social security number, and more were compromised. The exact number of affected users is unknown, but FlightAware has 12 million registered users. Affected individuals are being prompted … Read more
August 19, 2024 at 11:50AM National Public Data (NPD) confirmed a breach exposing personal data from millions of consumers in the US, UK, and Canada. The breach accessed extensive personal information, prompting concerns about identity theft. The incident highlights the need to move away from using social security numbers for identification and the limitations consumers … Read more
August 14, 2024 at 02:09PM Texas has sued General Motors and its OnStar subsidiary for allegedly collecting and selling drivers’ data without their knowledge or consent. The lawsuit claims that GM used telematics technology to transmit detailed driving data and then sold it to data analytics companies for the purpose of calculating insurance rates. GM … Read more
August 11, 2024 at 12:28PM Approximately 2.7 billion records of personal information for individuals in the United States were exposed on a hacking forum, revealing names, social security numbers, all known physical addresses, and potential aliases. It seems like the meeting notes are discussing a serious data breach involving almost 2.7 billion records of personal … Read more
August 5, 2024 at 03:40PM The Justice Department and FTC filed a lawsuit against TikTok and its parent company ByteDance for allegedly violating children’s online privacy protections. TikTok is accused of allowing children to create accounts and collect personal information without parental consent. FTC chair Lina Khan emphasized the need to protect children online from … Read more
August 5, 2024 at 02:05PM A Florida data broker, National Public Data, is accused of negligently handling billions of personal records, leading to a cyberattack and subsequent sale of the stolen data on the dark web. California resident Christopher Hofmann filed a potential class-action lawsuit, alleging his and others’ sensitive information was compromised. The lawsuit … Read more
August 5, 2024 at 06:00AM The US Justice Department and FTC have sued TikTok, accusing the company of violating children’s online privacy laws and previous settlements. Allegations focus on collecting personal information from children without parental consent, refusing to delete underage accounts, and sharing data with other companies. TikTok disputes the claims, but the lawsuit … Read more