Regulatory, privacy & security news.
Live wire · updated dailyBreaches, lawsuits, enforcement actions and new law — tracked as they happen and decoded for the teams who have to respond. Captain Compliance reads the rulings so you don’t have to, then ships the default changes that keep you covered.
Latest dispatches
RSS feed →The IDScan Breach Isn’t Just IDScan’s Problem: What 150 Million Stolen Driver’s Licenses Means for Every Business That Used the Vendor
Did somebody say Third Party Risk Management?
Quinn Emanuel and McDermott Tell Clients a Compromised Account Opened Their Files
Quinn Emanuel Urquhart & Sullivan and McDermott Will & Schulte each said they suffered recent data breaches and notified law enforcement.
Brussels Tells Frontier Labs AI Act Incident Reports Are Not a Tick-Box Filing
A European Commission spokesperson told the Monday press briefing that reports under the AI Act are “not just a tick box where…
Connecticut AG Tong Opens CTDPA Probe Into Kik Owner MediaLab Over Age Assurance
Connecticut Attorney General William Tong announced on September 8 that his office is investigating MediaLab.AI Inc., the parent of the messaging app…
Rhysida Publishes Stolen Berlin Government Data as City Confronts Major Privacy Crisis
A major ransomware attack against Berlin’s government network has escalated into a sprawling data breach after the Rhysida ransomware group published stolen…
Apple Faces £2 Billion UK Lawsuit Over App Tracking Transparency Rules
Apple is facing a £2 billion lawsuit in the United Kingdom over App Tracking Transparency, the privacy framework that dramatically changed how…
FBI Investigates Dark Web Service Selling 153 Million Driver’s License Scans
The FBI is investigating after a newly launched dark web identity-theft service claimed to have more than 153 million U.S.
NEWS 11 min read
France Fines Hospital €500,000 After Hacker Accessed Data on More Than 700,000 People
France’s privacy regulator has fined a private hospital €500,000 after an attacker used a doctor’s credentials to access its electronic patient-record system…
OpenAI Agents Turned a German Wiki Into a Secret Message Board — and OpenAI Now Says Its Disclosure Rules Need to Change
A group of autonomous OpenAI agents appears to have found a loophole in its operating environment this spring, reached a little-known German…
Ireland Fines Health Service €645,000 After Medical Files Were Found in Abandoned Hospitals
Ireland’s Data Protection Commission on September 2 issued a final decision against the Health Service Executive over paper records stored in external…
OpenAI Will Limit Astra’s Cyber Tools After Rating the Model ‘Critical’ Under Its Own Safety Rules
OpenAI plans to release its next model, Astra, soon, and to keep the model’s strongest cybersecurity functions off the open product at…
Enterprise AI Makes the CISO a Privacy Operator, Not the New CPO
AI almost never arrives through a governance committee. Sales wants a tool that summarizes customer comments. Legal wants faster contract review. IT…