Week in Review: Cameras, Classifiers, and What Happens to Your Data When the Company Dies
Facial recognition on the Tube. A four-year-unpatched criminal records portal. An airline's emails and 30 million recorded calls sold for $10 million....
dataBreach
20 articles on dataBreach.
Washington's Attorney General Counted, and 83% of People Said They Have No Control
Washington released its first-ever Data Privacy Report on 14 August. In 2025 the state logged 209 breaches affecting more than 8 million residents — a...
Framework, Trezor, and a Freight Company: A Week Where Nobody's Own Systems Were Breached
Framework told all its customers their data was taken. Trezor told 14,000 buyers their names and home addresses are out. Ceva Logistics leaked custome...
Seven Months Inside the UK Criminal Records Office, on Software Last Patched in 2019
The ICO has reprimanded ACRO Criminal Records Office after attackers spent seven months inside its website and content management system. The portal w...
Fortnight in Review: A Delete Button That Works, an Age Gate That Won't, and Seams Coming Apart
Two weeks that produced the best privacy mechanism America has ever shipped and the worst architecture Congress has advanced, in the same news cycle. ...
The Week the Watchers Got Breached — 100,000 UK Police, Swiss Federal Servers, and a Law Firm Wave
Hackers calling themselves ExfilSquad took names, organizations, and email addresses for more than 100,000 police officers and criminal justice profes...
Enforcement Arrives, Data Keeps Leaking: The Privacy Week of July 19–26, 2026
In eight days: California opened its first proactive privacy audit, nine states lost their grace periods, an AI agent breached Hugging Face, 55 millio...
Cancer Diagnostics, Payroll Files, and Tax Returns: The Week Enterprise Data Kept Falling Out
Abbott Laboratories lost 30 million rows from its Cancer Diagnostics business, including over a million Social Security numbers, to ShinyHunters. Esté...
55 Million Suno Users Were Breached in November. They Found Out From Have I Been Pwned in July.
AI music platform Suno was compromised in November 2025 — names, addresses, phone numbers, purchase histories, and partial card data for 55.3 million ...
An AI Agent Breached Hugging Face — and Machine-Speed Attacks Stopped Being a Demo
Hugging Face confirmed that an attacker chained two code-execution flaws in its dataset pipeline, stole cloud credentials, moved laterally into intern...
The Guards Left the Keys Out: CISA's GitHub Leak, a Worm in the npm Supply Chain, and the County That Paid $1M in Secret
This week's ledger is about guardians failing at their own jobs. CISA — the agency that lectures America on credential hygiene — published a postmorte...
$2.60 Per Genome: 42 States Settle With 23andMe for $18 Million Over the Breach That Broke It
Forty-two state attorneys general announced an $18 million settlement with 23andMe's bankruptcy estate over the 2023 credential-stuffing breach that e...
6.99 Million Driver's Licenses, 35 GB of Accenture's Keys, and a 24-Billion-Record Dump: The Breach Ledger Catches Up
AssuranceAmerica sat on a breach for nearly four months before telling 6.99 million people their driver's license numbers were gone — the largest lice...
One Zero-Day, a Dozen Victims: The Oracle Breach Wave Hits Insurance Regulators, Nissan, and 9 Million Medtronic Patients
ShinyHunters exploited a zero-day in Oracle's enterprise software and the disclosures are now landing in a wave: America's insurance regulators lost 3...
The June Breach Ledger: A Record Korean Fine, a Nintendo Ransom, and 1.4 Million Medical Records
While the policy fights over age verification and facial recognition grabbed the headlines, the back half of June 2026 delivered a brutal run of breac...
When Transparency Becomes an Attack Surface: Maine's Breach Portal Goes Dark
Maine pulled its public data-breach database offline this month after someone planted fake disclosures naming VRChat and Discord. The episode exposes ...
A Whistleblower Says DOGE Copied Every American's Social Security Record to an Uncontrolled Cloud
Chuck Borges, the former chief data officer at the Social Security Administration, alleges that DOGE copied the government's master Social Security da...
GDPR Breach Notifications Hit 443 Per Day — What Eight Years of Data Tells Us
European data protection authorities are now receiving 443 personal data breach notifications every single day — a 22% increase over last year and the...
Your Kid's School Uses Canvas. Here's What to Actually Do This Week.
About 8,809 institutions worldwide were named in the May 2026 Canvas breach — roughly 7,400 U.S. schools across all 50 states. If your child's school ...
Your Developer Tools Are the Attack Surface: The Vercel Breach and the AI Supply Chain Problem
Vercel — the platform hosting millions of web applications — was breached through a chain that started with an infostealer on an employee of an AI com...