Jaguar Land Rover confirms data theft after recent cyberattack
Sergiu Gatlan / bleepingcomputer - Jaguar Land Rover (JLR) confirmed today that attackers also stole "some data" during a recent cyberattack that forced it to shut down systems and instruct staff not to report to work. [...]
Back to Top / Wednesday, September 10, 2025, 11:21 am / permalink 14266 / 4 stories in 5 months
Salesloft says Drift customer data thefts linked to March GitHub account hack
Lorenzo Franceschi-Bicchierai / techcrunch - The breach, now known to have begun in March, raises questions about why it took six months for Salesloft to detect the breach.
Back to Top / Monday, September 8, 2025, 1:21 pm / permalink 14055 / 6 stories in 5 months
Wealthsimple Confirms Security Breach—Here’s What Happened
John Quintet / iphoneincanada - Toronto-based fintech Wealthsimple says a data breach on August 30 allowed unauthorized access to personal information from fewer than 1% of its clients. The company confirmed on Friday that no funds were stolen, no accounts were accessed, and no password…
Back to Top / Friday, September 5, 2025, 2:21 pm / permalink 13923 / 3 stories in 6 months
Google Fined $381M in France, $425M in the US for Privacy-Violation Tracking on Its Apps
Rohit Singh / medianama - The instances of fines for tracking users’ data in France & the US highlight the compliance pressure on big tech like Google as regulators take a tougher stance on privacy and targeted advertising.The post Google Fined $381M in France, $425M in the US for…
Back to Top / Thursday, September 4, 2025, 7:21 am / permalink 13764 / 10 stories in 6 months
US sues robot toy maker for exposing children's data to Chinese devs
Sergiu Gatlan / bleepingcomputer - The U.S. Department of Justice has sued toy maker Apitor Technology for allegedly allowing a Chinese third party to collect children's geolocation data without their knowledge and parental consent. [...]
Back to Top / Wednesday, September 3, 2025, 1:21 pm / permalink 13687 / 2 stories in 6 months
Disney to pay $10M to settle claims it collected kids’ data on YouTube
Sergiu Gatlan / bleepingcomputer - Disney will pay $10 million to settle claims by the U.S. Federal Trade Commission that it mislabeled videos for children on YouTube, which allowed the collection of kids' personal information without their consent or notification to their parents. [...]
Back to Top / Wednesday, September 3, 2025, 12:21 pm / permalink 13679 / 3 stories in 6 months
Roblox experiences are getting ESRB age ratings
Jay Peters / theverge - Roblox is going to start showing ESRB ratings alongside experiences to help users in the US better understand if an experience is appropriate for a user of a certain age. The new ratings will appear thanks to Roblox’s new partnership with the Internationa…
Back to Top / Wednesday, September 3, 2025, 12:21 pm / permalink 13678 / 3 stories in 6 months
Cloudflare Breach Exposes Customer Support Data in Major Salesloft Supply-Chain Attack
Markus Kasanmascheff / winbuzzer - Cloudflare confirms it was a victim of a major supply-chain attack via Salesloft, exposing customer support data and potential credentials from its Salesforce instance.The post Cloudflare Breach Exposes Customer Support Data in Major Salesloft Supply-Chai…
Back to Top / Wednesday, September 3, 2025, 8:21 am / permalink 13658 / 2 stories in 6 months
Disney agrees to pay FTC $10 million over YouTube videos for children
James Farrell / siliconangle - The Federal Trade Commission announced today that the Walt Disney Co. has agreed to pay $10 million to settle allegations that the entertainment company had engaged in the “unlawful collection” of children’s personal data on the YouTube platform. Regulato…
Back to Top / Tuesday, September 2, 2025, 9:22 pm / permalink 13637 / 3 stories in 6 months
Cloudflare Says Support Case Data Compromised by Breach of Salesloft’s Drift
PYMNTS / pymnts - Cloudflare said Tuesday (Sept. 2) that information shared in its customer support system should be considered compromised. The company issued this warning in a Tuesday blog post in which it disclosed that it was affected by a breach of Salesloft’s Drift t…
Back to Top / Tuesday, September 2, 2025, 7:21 pm / permalink 13631 / 2 stories in 6 months
Stolen OAuth tokens expose Palo Alto customer data
Paul Kunert / theregister - Security firm's Salesforce instance accessed using credentials stolen from Salesloft's Drift platform breach Palo Alto Networks is writing to customers that may have had commercially sensitive data exposed after criminals used stolen OAuth credentials lif…
Back to Top / Tuesday, September 2, 2025, 10:22 am / permalink 13546 / 6 stories in 6 months
TransUnion admits 4.5M affected after third-party support app breached
Connor Jones / theregister - Credit agency offers own services as compensation Credit scoring and monitoring biz TransUnion says that it recently suffered a breach affecting nearly 4.5 million individuals.…
Back to Top / Thursday, August 28, 2025, 9:20 am / permalink 13273 / 7 stories in 6 months
Whistleblower claims DOGE uploaded Social Security data to unsecure cloud server
engadget - The Social Security Administration’s (SSA) chief data officer, Charles Borges, has filed a whistleblower complaint alleging that members of the Department of Government Efficiency (DOGE) uploaded a copy of a key Social Security database to an unsecured cl…
Back to Top / Tuesday, August 26, 2025, 2:20 pm / permalink 13125 / 5 stories in 6 months
Google to pay $30 million to settle class-action suit over children's privacy
Anna Washenko / engadget - Google has reached a settlement over a lawsuit that claimed it illegally collected data from child users without parental consent through its YouTube video platform and then sent them targeted ads. The tech giant will shell out $30 million to settle the p…
Back to Top / Tuesday, August 19, 2025, 3:21 pm / permalink 12643 / 2 stories in 6 months
UK Reportedly Withdraws Demand to Access Encrypted iCloud User Data
Tim Hardwick / macrumors - The British government has agreed to withdraw its controversial demand to access Apple users' encrypted iCloud data, according to the U.S. director of intelligence.Tulsi Gabbard said in a post on X (Twitter) the UK had dropped its plans to force Apple to …
Back to Top / Tuesday, August 19, 2025, 4:20 am / permalink 12583 / 21 stories in 6 months
Workday hit by data breach targeting CRM systems
Colin Ryan / siliconrepublic - The US company was affected by a social engineering campaign that bears similarities to a recent wave of attacks by extortion group ShinyHunters.Read more: Workday hit by data breach targeting CRM systems
Back to Top / Monday, August 18, 2025, 9:21 am / permalink 12513 / 6 stories in 6 months
Instagram Map privacy controls spark user pushback
Instagram’s new Map feature has ignited a flurry of advice columns and tutorials as users scramble to learn how to disable automatic live location sharing. The rollout, which many say was introduced with little fanfare, has left privacy advocates both bemused and irritated at its seemingly over‐zealous defaults.
Back to Top / Friday, August 8, 2025, 12:21 pm / permalink 11937 / 4 stories in 6 months
Bouygues Telecom confirms data breach impacting 6.4 million customers
Bill Toulas / bleepingcomputer - Bouygues Telecom warns it suffered a data breach after the personal information of 6.4 million customers was exposed in a cyberattack. [...]
Back to Top / Thursday, August 7, 2025, 1:21 pm / permalink 11860 / 3 stories in 6 months
Air France and KLM disclose data breaches impacting customers
Sergiu Gatlan / bleepingcomputer - Air France and KLM announced on Wednesday that attackers had breached a customer service platform and stolen the data of an undisclosed number of customers. [...]
Back to Top / Thursday, August 7, 2025, 9:21 am / permalink 11835 / 2 stories in 6 months
An invisible prompt in a Google Doc made ChatGPT access data from a victim’s Google Drive
Maximilian Schreiner / the-decoder - A single manipulated document was enough to get ChatGPT to automatically extract sensitive data—without any user interaction.The article An invisible prompt in a Google Doc made ChatGPT access data from a victim’s Google Drive appeared first on THE DECODE…
Back to Top / Thursday, August 7, 2025, 8:21 am / permalink 11825 / 4 stories in 6 months