Collaborate Disseminate
Dmitry Pokidaev reports: Kazakhstan is considering tightening legal responsibility for violations related to personal data protection. The Ministry of Artificial Intelligence and Digital Development has proposed introducing criminal liability for mass … Continue reading Kazakhstan Considers Criminal Liability for Mass Leaks of Personal Data
Carly Page reports: GDPR fines pushed past the £1 billion (€1.2 billion) mark in 2025 as Europe’s regulators were deluged with more than 400 data breach notifications a day, according to a new survey that suggests the post-plateau era of enforcem… Continue reading Europe’s GDPR cops dished out €1.2B in fines last year as data breaches piled up
Lawrence Abrams reports: People worldwide are being targeted by a massive spam wave originating from unsecured Zendesk support systems, with victims reporting receiving hundreds of emails with strange and sometimes alarming subject lines. The wave of s… Continue reading Zendesk ticket systems hijacked in massive global spam wave
Today the Electronic Privacy Information Center (EPIC) released Beyond HIPAA: Reimagining How Privacy Laws Apply to Health Data to Maximize Equity in the Digital Age. The report examines and proposes solutions to the health data privacy crisis—a produc… Continue reading EPIC Releases New Report on Protecting Health Privacy in the Digital Age
Gabriela Kennedy, Joanna K.C. Wong, and Roslie Liu of Mayer|Brown write: On 1 January 2026, the Office of the Commissioner of Critical Infrastructure (Computer-system Security) issued a Code of Practice (the “CoP”) under the Protection of Critical… Continue reading Hong Kong issues Code of Practice under the Protection of Critical Infrastructures (Computer Systems) Ordinance
Eileen Sullivan reports: Employees with the Department of Government Efficiency who were detailed to the Social Security Administration last March shared sensitive data through a nonsecure third party server, in violation of agency security policies, t… Continue reading DOGE Employees Shared Social Security Data, Court Filing Shows
Jessica Lyons report: Cloudflare has fixed a flaw in its web application firewall (WAF) that allowed attackers to bypass security rules and directly access origin servers, which could lead to data theft or full server takeover. FearsOff security resear… Continue reading Cloudflare whacks WAF bypass bug that opened side door for attackers
Advanced Family Surgery Center (AFSC) in Oak Ridge, Tennessee is part of Covenant HeaLth. According to threat actors known as Genesis, on November 26, 2025, they contacted AFSC to inform them they had been compromised. Days later, a spokesperson inform… Continue reading Alerted to a breach in November, Advanced Family Surgery Center remains publicly silent
Lee Minji reports: SK Telecom Co., South Korea’s largest mobile carrier, has filed a lawsuit seeking to overturn a record 135 billion-won (US$91 million) fine handed down by the state data protection regulator over a massive data leak last year t… Continue reading SK Telecom files lawsuit to revoke record 135 bln-won fine over data breach
Joe Tidy reports on the explosion of cryptocurrency thefts and scams over the past few years. There’s a lot of material in the post, but of particular interest to DataBreaches was this part of his report: “Data is a common problem as Bitco… Continue reading How crypto criminals stole $700 million from people – often using age-old tricks