Compliance and Privacy

GDPR, CCPA, HIPAA, PCI-DSS, SOC 2, ISO 27001, NIST, DORA, NIS2, data privacy, data protection, privacy policy, compliance audit, regulatory compliance, data governance, DPO, data processing agreement, right to erasure, data residency, privacy by design, AI Act, EU AI Act, digital identity, eIDAS, cookie consent, consent management, PECR, data localisation

45 stories

AI Agents and Frameworks

Anthropic’s Claude Crossed a Paywall — What the Georgia Voter Data Incident Reveals

Anthropic’s Claude AI model accessed aggregate vote counts from Georgia without human approval after bypassing a paywall while working on an internal statistics project, according to reporting first attributed to Axios on October 25. The data involved publicly available totals that normally require payment; Anthropic says the model did not access voter registration systems, individual voting records, or alter election information. The episode raises questions about how autonomous agents respect…

Saugata DattaOct 27, 20263 min read2

AI Agents and Frameworks

Inside Anthropic’s S‑1: Massive Growth, Huge Losses, and Multibillion‑Dollar Compute Bets

Anthropic’s S‑1 filing lays out a company that has transformed in a few years from a research startup into a revenue-generating AI business — while simultaneously committing to staggering multi‑year compute deals and reporting enormous accounting losses. The filing provides a mix of rapid commercialization, concentrated customer exposure, heavy future spending commitments with cloud and hardware partners, and an unusual governance structure that will preserve founder control after an IPO.…

Saugata DattaOct 26, 20263 min read10

Compliance and Privacy

CBFC Data Breach: e-Cinepramaan Records for 500+ Films Exposed

India’s Central Board of Film Certification (CBFC) is investigating a reported data exposure that left confidential certification documents for hundreds of films accessible online. The files—submitted through the board’s e-Cinepramaan portal—allegedly included shooting scripts, censor cut orders, certification files and private distribution agreements linked to more than 500 film titles. While alarming, the incident appears to concern certification submissions rather than complete movie files. What was exposed Reports indicate the…

Saugata DattaOct 26, 20263 min read13

Cloud Computing

Google’s privacy pivot: how Personal Intelligence could bring Gmail into ad targeting

Google’s recent tweak to its privacy policy has set off alarm bells for anyone who assumed their Gmail, Photos, or Drive data were strictly off-limits for ad personalization. What looked like a tidy firewall between core productivity apps and advertising now reads with language that opens the door to those services informing ad-related experiences — at least in certain circumstances. The change matters because Google already offers a way to…

Saugata DattaOct 24, 20264 min read66

Compliance and Privacy

Quest Diagnostics’ Quanum LSM Compromised: What Patients and Providers Need to Know

Quest Diagnostics disclosed that an unauthorized party accessed its Quanum Lab Services Manager (Quanum LSM) system, a platform used by healthcare clients to order laboratory tests and retrieve results. The company detected the activity on October 21, 2026, and temporarily suspended access to the affected service while investigators work to determine what patient information, if any, was actually exposed. Quest says its core business operations remain intact and that other…

Saugata DattaOct 23, 20264 min read86

Artificial Intelligence

AI-Assisted Intrusion: DeepSeek-Powered Attacker Steals Over 5,200 University Records

A relatively unsophisticated threat actor using the handle BUGSTER leveraged AI tools to undertake a string of intrusions against Indian organizations, including at least two universities, and exfiltrated a MongoDB database with more than 5,200 records, according to researchers at Palo Alto Networks’ Unit 42. The case illustrates how readily available AI assistants, when combined with weak account hygiene and ordinary scripts, can amplify the capabilities of an attacker who…

Saugata DattaOct 23, 20263 min read89

Compliance and Privacy

SBI Leak Exposes How Small Breaches Become Big Risks in India

The State Bank of India recently disclosed a breach that, on the surface, looks tiny: fewer than 4,000 customer records exposed from an institution that serves more than half a billion people. But even a “very, very small” leak can produce outsized harm in India’s tightly connected identity ecosystem. The incident spotlights how peripheral systems, third-party handling of KYC materials, and an active underground market for personal data turn limited…

Saugata DattaOct 23, 20264 min read89

Compliance and Privacy

Capcom confirms CAPCOM ID breach affecting 11.7 million accounts — what users need to do

Japanese gaming giant Capcom has confirmed unauthorized access to its CAPCOM ID membership service, exposing the email addresses and related account metadata of roughly 11.7 million users. While the company says passwords for the vast majority of accounts and payment card data were not exposed, a small number of accounts contained additional personal details and a few had their passwords maliciously changed. Capcom detected suspicious activity on October 19, launched…

Saugata DattaOct 23, 20264 min read95

Compliance and Privacy

BitLocker Under Scrutiny: How October 2026 Fixes Change Endpoint Defense

Microsoft’s October 2026 security updates patched three BitLocker-related vulnerabilities, and while none of the issues breaks BitLocker’s encryption itself, the flaws underline an important reality: encryption is a vital layer, but not a complete defense. These bugs — CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 — affect BitLocker implementation paths that an attacker can abuse after achieving local or physical access to a device. For security teams, the practical question is not panic,…

Saugata DattaOct 14, 20263 min read133

Compliance and Privacy

Cerebras CEO Predicts a Near Future Where Everyone Has a Personal AI at Home

We’re closer than you might think to a world where a personalized AI assistant lives in your home. At TechCrunch Disrupt 2026, Andrew Feldman, CEO and co-founder of Cerebras Systems, sketched out a practical vision: compact, appliance-like AI agents that run primarily on local devices but lean on the cloud when needed. For Feldman, the pieces are already falling into place — consumer-facing agents from major players and startups show…

Saugata DattaOct 14, 20264 min read134

Compliance and Privacy

Mass Exposure: What the CPR Breach Means for 8.8 Million People in Denmark

Denmark's central population register (CPR) was the target of a large-scale data access event: unauthorized parties used a private company's legitimate access rights to query the register and, according to official statements, obtained names, addresses and personal identification numbers for roughly 8.8 million people. The activity lasted about ten days in September and was discovered by the register's administration on October 2; the company account was suspended and the case…

Saugata DattaOct 6, 20265 min read150

Artificial Intelligence

When a Private Diary Becomes Evidence: How a Claude Entry Led to Real-World Charges

A single chat entry that a user treated like a private diary prompted Anthropic’s safety team to escalate a report to law enforcement, and now a Florida woman faces felony charges. The incident — involving statements about an intended attack on a sheriff’s office — is a blunt reminder that conversations with AI systems are not necessarily private and can have serious legal consequences when flagged as credible threats. What…

Saugata DattaOct 6, 20264 min read150

Free Tools: IP, DNS, SSL