Extensive campaign involving the Pegasus spyware in El Salvador targeted at least 35 journalists and political activists from June 2020 to November 2021, with most of the country's major media outlets affected.
The narrative around NSO Group's Pegasus spyware thus far has been one of authoritarian governments using it to suppress internal criticism. The story may be shifting to one of international espionage with US State Department iPhones hacked by it.
NSO Group was found to not only have exceeded its legal level of access to the WhatsApp servers and broken the terms of service with its Pegasus spyware, but to also have violated the US Computer Fraud and Abuse Act as well as California state law.
Pegasus spyware was used to track journalists, lawyers and activists in Jordan from 2019 to late 2021. Some specific incidents occurred on iPhones after Apple had sued NSO Group and removed exploits.
Numerous democracy activists opposed to the Thailand monarchy were targeted during a period of heavy protesting in 2020 and 2021, and had their phones infected with Pegasus spyware.
A 2018 Facebook privacy breach incident that first drew complaints just after the GDPR went into force has finally resulted in the issuance of a penalty. The €251 million GDPR fine stems from a flaw in the platform's "View All" feature.
Misconfigured AWS buckets containing dozens of terabytes worth of social media messages were exposed to the public. The data found in Pentagon's leaked database was gathered by the U.S. military as part of their ongoing efforts to identify so called ‘persons of interest’, revealing the extent of internet surveillance.
Every week, there seems to be a major new data breach that impacts millions. So it’s no surprise that personal cyber insurance are being offered by insurance companies, and the global market could be worth as much as $3.1 billion by the year 2025.
The ransomware attack on AirAsia took place on November 11 and 12, with samples of the stolen personal data being leaked to the group's dark web site about a week later. The posted samples contain employee personal information as well as passenger booking information.
India has now been seeking to establish a single national-level personal data protection bill for about six years. The newest development in this saga is the Digital Personal Data Protection Bill, the first attempt introduced to Parliament since the previous effort was withdrawn in 2022.
