With a total of €2.92 billion levied throughout the bloc in 2022, GDPR fines are up in spite of a small drop in the overall data breach count as the bloc eyes stronger regulation for AI.
2020 and 2021 were record years for ransomware payments at about $765 million. The take collected by ransomware operators is now down 40% to $457 million in 2022.
The FTX recovery team says that it has recovered about $5 billion at this point, but that a significant portion of the remaining shortfall is due to almost half a billion in stolen crypto.
The Mailchimp security breach appears to have lasted for less than a full day. The company says that client login information was not compromised, but customer support tools were used to send phishing emails.
Though it did not suffer a security breach, PayPal is reporting that a massive credential stuffing attack appears to have yielded access to about 35,000 PayPal accounts.
ODIN Intelligence, a law enforcement technology vendor, has experienced a chain of security incidents as of late including a defaced website (and possibly much worse). Company had already been a magnet for controversy over some of its more privacy-invasive products.
A third-party data breach involving a U.S. contractor exposed the personal information of over 2 million Aflac cancer and Zurich automobile insurance policyholders in Japan.
French regulator CNIL found that the tiktok.com website, which allows users to view content via a web browser without logging in, did not have an adequate process for cookie consent.
privacy lawsuit claims to have tested what Apple apps "phone home" with and found that it seemingly makes no difference what the user chooses in terms of analytics data permissions.
An established cybercrime gang leaked sensitive data, including unredacted child abuse files, after a ransomware attack on San Francisco Bay Area Rapid Transit Police department.
