Nikkei Inc. reported a new data breach, its third in about a month, that exposed 1.83 million records of personal information. The Japanese giant says subsets of the data contained personally identifiable information and other sensitive details, but most datasets contained no identifying information. The company said 150,000 records contained at least one of the … Read more
Burger King Japan, the Japanese subsidiary of global fast food giant Burger King, reported a major data breach after attackers accessed a server containing 11.18 million customer details. Founded in Florida in 1953, Burger King is now a multinational fast food chain with nearly 20,000 locations worldwide, including 350 in Japan. In a news release … Read more
The Norwegian Data Protection Authority (Datatilsynet) has fined Xandr, an advertising company owned by Microsoft, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive data of Grindr users in the country. The data protection authority said this was the largest fine it had ever imposed. “We imposed such a large fine in this … Read more
The Italian Data Protection Agency (GPDP) has fined IQVIA 7 million euros ($7.8 million) for poor data processing practices that the agency said could have put about a million patients at risk of data disclosure and deanonymization. IQVIA is a multinational company providing healthcare data analytics, technology and clinical research services. The company claims on … Read more
Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. The new command prompt appears when using Claude’s voice features and specifically asks users to allow Anthropic to use their voice data for AI training. “Allow us to use your voice data to improve our … Read more
According to the Technical University of Denmark (DTU), information of up to 200,000 users may have been exposed after hackers accessed their identity and access management system and downloaded large amounts of data. The university says the attacker used compromised credentials to log into DTUBasen, its identity and access management (IAM) system, allowing access to … Read more
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. Frontline Education is an edtech company that provides administrative and workforce management software and services to school districts. Last night, a reader … Read more
Enterprise e-commerce platform BigCommerce fell victim to a supply chain attack that resulted in the theft of customer data. BigCommerce is a SaaS provider that enables merchants to build and manage online stores. It hosts the stores, provides backend tools and takes care of server security. Late last week, the company began notifying retailers that … Read more
E-commerce platform BigCommerce has alerted several retailers to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. The cloud-based Software-as-a-Service (SaaS) e-commerce platform confirmed the credentials compromise on September 17 and immediately removed the apps to protect its customers. UK-based online spirits retailer Master … Read more
Google has been fined 403 million euros ($463 million) for violating the European Union’s strict data protection rules by improperly processing users’ location data, the bloc’s data protection regulator said on Monday. The Irish Data Protection Commission said its investigation found that Google did not lawfully or fairly process location data in users’ web and … Read more