A new regulatory filing disclosed that genetic testing company 23andMe leaked the ancestry information of nearly 7 million users in the October 2023 data breach.
A lawsuit that follows on from the Epic Games vs Apple judgment of late 2021 has now been joined by the DOJ and 35 states, as Apple's app market policies are increasingly tested against antitrust laws.
Disney has settled accusations of violating federal children’s privacy rules preventing the collection of personal data of internet users under the age of 13, and the outcome builds on the terms of a prior 2019 FTC settlement involving Google that set new requirements for parental consent on YouTube.
Retailer WH Smith suffered a cyber attack that leaked employee data, including names, dates of birth, and National Insurance Numbers. The incident leaked the data of current and former employees, but customer data was unaffected.
The attribution of the Wuhan cyber attack was followed by an announcement from Chinese authorities that a "highly secretive global reconnaissance system" run by US intelligence agencies would be exposed.
Threat intelligence firm Group-IB says cybercriminals actively used Google Forms and Telegram bots to collect stolen data from exploit kits during phishing attacks.
Hacking group ShinyHunters released Pixlr's 1.9 million stolen user credentials on a hacker forum. The data was accessed from an AWS S3 bucket while breaching sister site 123rf.
More than one-third of organizations are concerned about privacy compliance budget spending to meet the requirements of evolving data privacy laws around the globe.
There are valid reasons to have serious privacy concerns about Facebook’s new direction. The announcement of the Facebook metaverse has thus far been met with at least as much suspicion and hesitancy as it has enthusiasm.
The Lazarus hackers are generally in pursuit of profit. But in this case, the main interest appears to be cyber espionage. A report indicates that the group is targeting the Log4j vulnerability in energy companies.
