Data Breach Roundup (Mar 27 - Apr 2, 2026)
FBI Director Kash Patel's emails, heath tech companies, and the European Commission are some of this week's most notable data breaches.
The FTC has determined that OkCupid and their owner Match Group don’t have to pay a fine after settling a case in which they shared 3 million user photos and location information to a facial recognition firm.
RSS Feed • Follow @PrivacyNews@mstdn.plus on Mastodon • Find more news on the forum
FBI Director Kash Patel's emails, heath tech companies, and the European Commission are some of this week's most notable data breaches.
macOS 26.4 is now out, and with it comes a new feature in the Terminal app to help prevent malicious commands pasted into the terminal from running.
Angela Lipps, an innocent, 50-year-old grandma who was arrested after wrongfully being identified by facial recognition software, has finally been released.
Cross-platform end-to-end encryption in RCS may finally be coming to iOS, as the new iOS 26.5 beta released by Apple has end-to-end encryption support.
Many in the privacy and FOSS communities see the move as capitulation to draconian and invasive laws, despite developer assurances.
While convenient and efficient, the move raises concerns about a potential "slippery slope" of data abuses.
After being bought out by Walmart in 2024, “select new Vizio OS TVs“ will require a Walmart account to function properly, a representative told Ars Technica.
This week saw breaches from anime streaming service Crunchyroll, carmaker Mazda, cybersecurity company HackerOne, and a new hacker group called "Internet Yiff Machine." No, really.
Following their shortening of the deadline to implement post-quantum encryption to 2029, Google today announced the “first phase” of its post-quantum transition.
French newspaper Le Monde was able to locate a French aircraft carrier in real time using publicly available profile information of a French Navy officer on the fitness app Strava.
The security and privacy-focused GrapheneOS stated in an X post that they will “remain usable by anyone around the world without requiring personal information, identification or an account.”
The Information reports that a cybersecurity incident classified as the second-highest severity level Sev 1 occurred due to an AI agent similar to OpenClaw.
Eleven companies have signed an accord to address the growing issue of “online scams and fraud,” with the notable exclusion of Apple.
Steam was used to spread malware via several games, and the FBI Seattle division has announced that they’re seeking information from those affected.
Once more from the "irony" department: an "identity protection" company falling for a phishing attack.
The Black Lotus Team at Lumen has discovered a new malware strain called KadNap that has been creating a botnet of Asus routers since at least August 2025.
This was a busy week for data breaches featuring Starbucks, Loblaw, DOGE, and many more.
Niantic spinoff, Niantic Spatial, used over 30 billion images taken by users of Pokemon Go to train its “visual positioning” system to help robots navigate the world.
Intel’s hardware-accelerated Fully-Homomorphic Encryption chip, Heracles, could bring fully E2EE server-side processing into viability.
The UK’s Companies House alerted the public of a security issue that allowed other users to access “dates of birth, residential addresses and company email addresses.”
Privacy Guides is the best place to learn about protecting your digital life. You can get more articles like these, straight to your inbox:
No spam. Unsubscribe anytime.