Data privacy news covering regulations, GDPR, user data protection, privacy policies, and digital privacy rights developments.
Blockchain analytics firm Chainalysis revealed attackers accessed customer accounts, exposing password hashes and live tokens. The breach, which involved AI-assisted on-path attacks in October, affects high-profile clients including the FBI, US Air Force, Microsoft, and Coinbase. The company has taken its KYT service offline while investigating.
Flo Clifford argues that the WTA's failure to disclose live-streamed microphones during practice sessions exposed an alarming disregard for player privacy. The commentary contends that the organization prioritizes internet clout over athlete well-being, suggesting players are increasingly treated as content-producing machines rather than professionals deserving of respect.
The commentary condemns the WTA for broadcasting private player conversations without consent, citing the incident at the WTA Finals where microphones captured unguarded moments. It argues this represents a severe failure of professional responsibility and privacy standards, exposing players to public scrutiny they did not agree to.
A Seoul administrative court dismissed Coupang's injunction lawsuit to block a historic 423 billion won ($315 million) fine for a massive data breach compromising over 33.7 million users. While the court granted a 30-day stay on a smaller penalty related to unauthorized data collection, it denied suspension of the primary breach-related fine.
Attorneys general from Connecticut, Michigan, and New Jersey announced a settlement of up to $10 million with companies regarding a March 2023 data breach. The deal addresses allegations that the firms failed to protect the medical data of 13.3 million people.
The National Privacy Commission is investigating reports of data breaches across multiple government agencies, including the Department of Information and Communications Technology. No official breach notifications have been submitted yet as authorities verify the incidents.
Singapore regulators have issued an advisory highlighting security and privacy risks linked to personal AI agents capable of performing tasks like booking and email management. Authorities warned that these tools can be exploited by scammers and urged users to limit access permissions and retain control over critical actions to avoid liability.
Two California consumers filed a class action lawsuit in federal court alleging Axon Enterprise violated privacy laws. The suit claims the company collects and stores data on millions of drivers through its fleet of cameras and automated license-plate readers.
Families affected by the Southport and Nottingham stabbings have issued an open letter condemning NHS staff for improperly accessing victims' confidential medical records. They urge ministers to implement stronger safeguards after investigations confirmed widespread unauthorized access to sensitive patient data.
The European Union has issued a warning to travelers about over 150 third-party websites fraudulently charging for the upcoming ETIAS authorization. Since the system is not yet operational, experts advise that any request for payment is a scam and caution against sharing personal data with commercial intermediaries.