Digital Privacy Watch

Denmark's Central Person Register breach exposed names, addresses, and CPR numbers (equivalent to Social Security numbers) for 8.8 million people,...

• Denmark hack compromises data of millions, directly exposing personal information
• 50 European Parliament members hit by deepfake pornography...

FinCEN's withdrawal of rules that would have forced exchanges to collect names and addresses for self-custody transfers over $3,000 ends six years of...

FortiBleed has compromised over 86,644 FortiGate devices in 194 countries by exploiting reused credentials, not zero-days, then locking admins out...

Three recent incidents show personal data increasingly exposed across everyday systems.

• Georgia Power exposed names, addresses, phones, emails, and...

Small missteps—an exposed NetScaler config, a public repo leak, or a single email reply—keep enabling zero-day exploitation and ransomware footholds....

Centralized records and customer portals are turning ordinary accounts into prime targets, with recent incidents spanning government, telecom,...

Access Residential Management's breach filing with Vermont shows residents must view notices as identity-protection triggers, not routine...

• Small providers like Bacon County Health Services and Arkansas Urology were hit by network intrusions exposing SSNs, driver's licenses, and detailed...

Ransomware has evolved into organized crime with sophisticated tactics hitting essential businesses hard.

• Teen-led gangs: A 16-year-old ran...

• Attackers deployed legitimate remote monitoring tools in 45% of endpoint incidents in Q1 2026, blending malicious access with routine IT work.
• RMM...

Even when attackers exaggerate claims or cause no outage, water-sector breaches create real public-safety risks due to the infrastructure's critical...

Cyber risk is becoming harder to price as AI drives sophisticated phishing and social engineering while ransomware evolves into data theft with...

• 30-day rule requires businesses to notify affected residents as soon as possible, but no later than 30 days after discovery.
• Vendors must alert...

Qilin ransomware hit Chadwick Switchboards in Australia, encrypting data and directly disrupting manufacturing operations in an extortion attack. This case shows ransomware evolving from data theft to halting industrial production.

Hardware-wallet security extends far beyond the device itself. Trezor and SafePal breaches via third-party logistics provider ShipMonk exposed 53,487...

A cyberattack on a Polish travel site exposed names, dates of birth, phone numbers, addresses, emails and passport details, creating ongoing risks of...

Atlantic Digestive Specialists breach exposed a dangerous mix of patient data that heightens identity theft and long-term privacy risks.

• Exposed...

State Farm's clear breach notice gives customers exactly what they need to assess risk.

• Confirm scope: Only username and password were exposed; no...

The FBI hack exposed names, home addresses, cell numbers, emails, IDs, and SSNs for nearly all bureau employees plus over 8,000 task force officers,...