Collaborate Disseminate
Millions here, tens of millions there. Are we all getting breach fatigue by now? Over on HaveIBeenPwned, Troy Hunt reports that Suno experienced a data breach in November 2025, which 404 Media first made public this month: In November 2025, AI music g… Continue reading Suno Data Breach had a breach in 2025. Why is it first being known now?
Kim Eun-bi reports: The Seoul Metropolitan Government will send individual text messages to about 4.62 million citizens affected by a data breach involving membership information for Ttareungyi, the city’s public bike-sharing service, notifying t… Continue reading Seoul Notifies 4.62 Million of Ttareungyi Data Breach, Offers Free Passes
On March 18, 2026, Navigate360 learned that 8.3 million anonymous tips had been exposed. The company’s response—and the silence of the programs that depend on its platform—has persisted for months. We’re now seeking accountability through s… Continue reading Broken Promises of Anonymity: Four Months Later, Still No Transparency. Now We’re Seeking Accountability.
Anna Zhadan reports: American healthcare giant Abbott Laboratories is investigating two cyber incidents that appear to be unrelated: one involving its Cancer Diagnostics business and another affecting its LabCentral portal. Although unrelated, the two … Continue reading Medical giant Abbott investigates two cyber incidents as ShinyHunters and ShadowByt3$ both claim breaches
There’s another update in the litigation involving 23andMe, below, but this won’t be the last update, as California’s Attorney General has also recently sued them under California’s privacy laws. New York Attorney General Letit… Continue reading NY Attorney General James Secures $18 Million From 23andMe for Failing to Protect Customers’ Genetic Data
Lorenzo Franceschi-Bicchierai reports: U.S. prosecutors have accused a Florida man of uploading fake video games that contained malware to Steam, the popular PC games platform. Once victims downloaded and installed the games, the malware was designed t… Continue reading FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Jeff Piontek comments on the Instructure breach: The forensic review has taken far longer than anyone expected. Through June, Instructure was still finalizing customer-specific findings and asking institutions to designate a security contact to receive… Continue reading The Breach That Won’t End: An Update on Canvas, and how they created an EdTech’s Vendor Trust Problem
Gianluca Semeraro reports: Italy’s data protection authority has fined telecoms operator WINDTRE €1.7 million ($1.94 million) for “serious shortcomings” in its data security systems, leading to two unauthorised breaches and the exposure of personal … Continue reading Italy fines WINDTRE €1.7 million over data breaches
Gianluca Semeraro reports: Italy’s data protection authority has fined telecoms operator WINDTRE €1.7 million ($1.94 million) for “serious shortcomings” in its data security systems, leading to two unauthorised breaches and the exposure of personal … Continue reading Italy fines WINDTRE €1.7 million over data breaches
Vlad Constantinescu reports that the Office of the Australian Information Commissioner has determined that although the Qantas data breach of 2025 resulted in 5.67 million customer records being compromised and leaked, the regulator’s preliminary… Continue reading AU: Regulator’s preliminary findings did not indicate Qantas breached privacy obligations