Digital Privacy Watch

• Confirmed facts: Unauthorized access occurred April 2-3 2026; files may have been acquired; names, SSNs and financial account details were...

Ransomware groups are shifting from conventional phishing to AI-assisted intrusions, slashing time to compromise.

• Chaos group hit US manufacturer...

LACMA breach exposed unchangeable data like SSNs and medical details, with risks that can surface months later.

• Confirm exposure via notification...

A hacker claims 77 Diamonds data includes over 409,000 home addresses, exposing customers to physical safety threats like targeted harassment that go beyond standard identity theft. The exposure is unverified and remains a hacker assertion only.

A practical workflow starts with tools you already own before turning to third-party scanners.

• Built-in checks: Chrome, Safari, and iOS Passwords...

A routine update to Colorado's Find My Voter Registration Tool disabled confidentiality protections, exposing personal details of 59 voters for about...

• Researchers discovered 28,000 exposed .git repositories after scanning 3.5 million hosts, uncovering active AWS, Stripe, OpenAI and GitHub keys.
  -...

Mass objection letters can pressure supermarkets using biometric surveillance.

• Copy the template demanding UK GDPR lawful basis, DPIA, watchlist...

Ransomware recovery fails if attackers retain network access—containment, persistence hunting, and eviction must happen before restoring any encrypted...

Attackers rarely rush to steal data after gaining access. They first map the network, locate sensitive records, and study normal activity patterns to...

• Carhartt breach exposed 12.9 million accounts including names, emails, phones, and addresses
• Manchester Airport incident affected 8.7 million...

Boston Scientific detected the cyber incident on August 25, triggering a network outage that blocked order-processing systems and halted shipments of...

Flock's system of 120,000 cameras across 7,000 agencies creates a searchable record of every vehicle's location, make, model, and details like bumper...

Dating profiles hold intimate details like sexual preferences, geolocation, and biometrics—far more sensitive than most users realize. Simply deleting...

Qilin's unverified claim of breaching ATF servers underscores why alleged ransomware attacks on federal law-enforcement agencies require prompt...

Public cloud storage buckets remain a persistent attack surface because names are guessable and misconfigurations common, exposing sensitive files via...

Greatness PhaaS has evolved from basic credential theft to advanced AiTM and device-code attacks against Microsoft 365.

• Attackers spoof RingCentral...

• Healthcare breach: University Surgical Associates exposed SSNs and health records, prompting attorneys to investigate a potential class action for...

Companies that cut corners on breach notifications risk added legal exposure, as notices must follow strict rules: regular mail, E-Sign consented email, or substitute notice.

Third-party vendors remain a weak link, with attacks on email, cloud, and financial platforms hitting everyday users hardest.

• Zimbra flaw enabled...