US sues TikTok for violating children privacy protection laws

August 2, 2024 at 04:54PM The U.S. Department of Justice has filed a lawsuit against TikTok and its parent company, ByteDance, accusing them of widespread violations of children’s privacy laws. Based on the meeting notes, it can be summarized that the U.S. Department of Justice has filed a lawsuit against TikTok and its parent company, … Read more

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

July 31, 2024 at 01:09AM Meta, the parent company of Facebook, Instagram, and WhatsApp, has reached a $1.4 billion settlement with the state of Texas over allegations of unlawfully collecting biometric data from millions of users. The lawsuit accused Meta of violating Texas’ biometric privacy law by using facial recognition software without users’ informed consent. … Read more

Oracle coughs up $115M to make privacy case go away

July 22, 2024 at 09:52AM Oracle has agreed to pay $115 million to settle a class action lawsuit alleging misuse of user data. The settlement benefits 220 million people and commits Oracle to address privacy violations. This move follows Oracle’s decision to exit the advertising business, which declined to $300 million in revenue in fiscal … Read more

Over 400,000 Life360 user phone numbers leaked via unsecured API

July 17, 2024 at 12:34PM A threat actor leaked personal data of over 440,000 Life360 customers by exploiting a flaw in the login API. The breach also impacted Trello accounts, and Life360 disclosed an extortion attempt linked to a separate Tile customer support platform breach. The exposed information includes names, addresses, email addresses, and phone … Read more

Data of Millions of mSpy Customers Leaked Online

July 15, 2024 at 10:06AM Over 310GB of data from spyware maker mSpy, including 2.4 million unique emails, was leaked online and obtained by data breach notification site Have I Been Pwned. The leaked data includes user information, attachments, and support tickets from high-profile individuals. mSpy, advertised as a parental control application, has been misused … Read more

AT&T Breach May Also Impact Millions of Boost, Cricket, H2O Customers

July 12, 2024 at 04:02PM AT&T’s breach of a third-party cloud platform, Snowflake, exposed phone numbers and metadata of calls and texts for nearly all AT&T wireless customers and others. The data was accessed between April 14 and 25, 2023. The stolen information, including cell site identification numbers, poses risks to privacy and security, potentially … Read more

City of Philadelphia says over 35,000 hit in May 2023 breach

July 9, 2024 at 12:59PM In May 2024, the City of Philadelphia disclosed a data breach affecting over 35,000 individuals’ personal and protected health information. The breach, which occurred between May and July 2023, exposed demographic, medical, and limited financial data. The City has notified affected individuals and is taking steps to improve security and … Read more

Crooks crack customer info at tracking device vendor Tile, issue ‘extortion’ demands

June 12, 2024 at 09:19PM Life360, the company behind Tile Bluetooth tracking devices and apps, reported a “criminal extortion attempt” after unauthorized access to customer data. The breach accessed names, addresses, emails, and phone numbers, but not more sensitive info. The CEO’s statement did not reveal ransom amount or whether paid. Law enforcement has been … Read more

BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says

May 9, 2024 at 08:57AM BetterHelp customers are now able to claim refunds from a $7.8 million settlement after the U.S. Federal Trade Commission accused the company of sharing sensitive health data with advertisers. Around 800,000 individuals are eligible for refunds of approximately $10 each, covering services used between August 2017 and December 2020. Notifications … Read more

Hacker Sentenced After Years of Extorting Psychotherapy Patients

May 2, 2024 at 04:05PM Finnish national Aleksanteri Kivimäki was sentenced to six years and three months in prison for stealing thousands of patient records from a psychotherapy clinic. Kivimäki, known online as “Zeekill,” demanded ransom from the clinic’s patients and caused a significant rise in Finland’s crime figures. He was arrested in France and … Read more