Fox35 in Orlando, Florida, reports that a school district is suing a parent after the district mistakenly sent them unredacted data in 47,000 records: The Lake County School Board filed a lawsuit against a parent after an employee mistakenly shared the confidential education and disability records of approximately 47,000 students. The district is asking a...

VRT reports: Brussels University Hospital UZ Brussel (VUB) was the first hospital to report network problems. These are affecting the hospital’s IT infrastructure and telephone systems. There are also problems at AZ Monica in Antwerp, at the Heilig Hart Hospital in Lier and Sint-Andries Hospital in Tielt. As a result, at UZ Brussel scheduled operations...

HIPAA Journal has a convenient table of HIPAA enforcement actions by state attorneys general. Most entries involve violations of the Security Rule and/or HITECH, but a few appear to relate more to the Privacy Rule or access to records. You can find the table at https://www.hipaajournal.com/hipaa-enforcement-by-state-attorneys-general/ DataBreaches.net has reported on most of the incidents or...

Tess Ikonomou and Josh Butler report: OpenAI will not face criminal penalties over the Medicare data breach, but the prime minister has flagged changes to Australia’s criminal law to crack down on future breaches by artificial intelligence companies. Anthony Albanese on Tuesday released the recommendations of a “rapid review” into the June breach of a...

CNA reports: SPH Media has been hit by cyberattacks on five of its systems, but no customer financial information or account access was compromised, the company said on Tuesday (Nov 10). “(The cyberattacks) are believed to be a concerted effort that was carried out by the same threat actor,” an SPH Media spokesperson said in...

Othel V. Campos & Rex Espiritu report: The National Privacy Commission (NPC) said Tuesday it has received personal data breach notifications from 10 government agencies, including the Bureau of Internal Revenue (BIR), the Department of Information and Communications Technology (DICT) and the Securities and Exchange Commission (SEC). The other agencies are the Presidential Commission on...

Yonhap News reports: Korea’s state-run Financial Security Institute (FSI) reported a data leak following a hacking attack targeting its security assessment system, officials said on Tuesday. The FSI, which oversees financial information provided by banks and insurers, detected the breach the previous day, according to financial authorities. The leaked information reportedly came from the FSI’s...

Andrew Crocker of EFF writes: Today, along with the ACLU, EFF filed an amicus brief in the Sixth Circuit court of appeals in United States v. Sturdivant, a case where police warrantlessly tracked a suspect’s movements using Automated License Plate Reader (ALPR) data. Our brief details the vast, interconnected network of ALPRs that constantly track...

Suzanne Smiley reports: Cybercriminals are infecting devices on a large scale with spyware, increasingly compromising systems belonging to average people, according to a new report from the threat hunting firm iVerify. The company found a rate of 1.07 spyware infections per 1,000 consumer scans of the startup’s free online checks. The security firm reported a...

Laura Kim, Jayne Ponder, and Marissa Uri of Covington and Burling write: On October 22, 2026, the Governor of Pennsylvania signed the Artificial Intelligence Deceptive Advertising Act (Senate Bill 806) (“Act”) into law. The Act joins a growing number of state laws focused on the use of AI in advertising. However, unlike the laws in...

NEW YORK—The AFT and the United Federation of Teachers today announced a legally binding agreement with Anthropic that makes AI safety, privacy and transparency standards enforceable in thousands of U.S. K-12 schools. The national AI Safety and Privacy Standard for Schools automatically applies to Anthropic’s existing agreements with school districts using Claude for Teachers and...

Seen on Epichealth: 4 November 2026 What has happened Epichealth operates four medical clinics including the Warrnambool Medicare Urgent Care Clinic,  Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza, and Epichealth Portarlington. Epichealth recently experienced a cyber incident, during which an unauthorised third party accessed a part of our IT systems. As soon we became aware...

A breach involving a public figure prompted this press release from Italy’s data protection authority: Regarding the dissemination of personal data on the dark web relating to Vice President Antonio Tajani and his family members, the Italian Data Protection Authority warns media outlets, newspapers, websites, and platforms that the acquisition, dissemination, and republishing, by any...

Victor Tangermann reports: After decades of establishing itself as one of the worst guardians of personal data, Meta raised eyebrows this year by encouraging users to hand over their email logins and credit card information to its new AI agent, Muse. The tool, a privacy nightmare anthropomorphized by a furry apparition, can crawl through years...

Olivia DeRicco reports: Woodley, et al. v. Google LLC, et al. Filed: October 9, 2026 ◆ § 5:26-cv-11715 Read Complaint A class action lawsuit alleges Google and UPS wrongfully disclose users’ private data to third parties by way of the Google Search tracking widget. A proposed class action lawsuit alleges that the Google Search-based “Track...

Zach Weissmueller reports: The war against anonymity is raging in Europe. “The witch hunters work like a mob, and if enough of them phone the police, the police are going to come,” says Bernie Spofforth, a political activist who was detained by U.K. police for a social media post. It’s coming to the United States,...

From the “sounded-like-extortion-to-us department,” T. Keung Hui reports: Triangle school districts are trying to get more information about how they’ll be impacted by Google’s plan to change access to Google Search in schools. Google set off a firestorm this week when it initially announced that it would turn off access to Google Search for schools...

Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets. The hacking software, called Artex, is an open source autonomous penetration testing tool, meaning software that automatically probes computer systems for...

From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and email addresses of 20,614 registered users of Norad’s Grant Portal. In addition, they extracted information related to grant applications submitted by at least three organizations. Norad is still working...

A press release from NYS Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James and a coalition of three other attorneys general today secured $10 million from Perry Johnson & Associates, Inc. (PJ&A), Perry Johnson, Inc. (PJI), Perry Johnson & Associates Coding, Inc., Perry Johnson & Associates Radiology, Inc., and Medical...