Problems with consent, purpose limitation, retention periods, and more At the heart of the GDPR (General Data Protection Regulation) lie the Article 5 data protection principles. When I asked data...
...enabling database access. Email account takeovers resulting in PHI exposure in healthcare. Source-code platform compromise (self-hosted GitLab) enabling mass repository exfiltration. List of data breaches and cyber attacks disclosed in...
...vulnerabilities remain in play, as suspected in the Allianz Life breach. List of data breaches and cyber attacks disclosed in June 2025 Disclosure date Organisation Country Sector Incident type Records...
...compiled via infostealers (184 million+ credentials) Vendor/Cloud breaches exposing customer/employee data Ascension Health (via third-party file tool): 437,000 Spyware apps (stalkerware): 3.2 million Direct or insider breaches involving client data:...
...rather than group it under ‘unpatched’ in general. Accidental data breaches Last month, just 15 security incidents or data breaches were caused accidentally (as opposed to originating from an attack...
...two-month Europol action (revealed to the public on 22 December) discovered that 443 organisations had suffered data breaches – specifically, their customers’ payment card data had been compromised. These breaches...
...lists, we distinguish between breaches caused by an organisation’s employees (‘data breaches’) and those that result from criminal hacking (‘cyber attacks’). We also give ransomware its own category, due in...
The GDPR (General Data Protection Regulation) requires organisations to conduct a DPIA (data protection impact assessment) for data processing that is “likely to result in a high risk to the...
...Deploying data loss prevention technologies where appropriate. Training staff on secure handling and the risks of data leakage. Why data leakage prevention matters Most modern breaches involve data movement: files...