ClarityCheck, a people-search website, left over 9 million image files and user contact data publicly accessible due to misconfigured cloud storage and APIs. The data, including facial images, was secured after security researcher Jeremiah Fowler alerted the company.
A data breach on the Canvas online learning platform affected over 153,000 students and staff across four tertiary institutions in Hong Kong, according to the privacy watchdog.
Hong Kong's Privacy Commissioner, Ada Chung, advises caution with personal data, especially in online shopping and sign-ups, as complaints rose 62% in the first half of 2026, largely attributed to the AI era.
Sogang University in Seoul suffered a hacking attack resulting in the leak of personal information for some 180,000 students, graduates, and faculty, with former President Park Geun-hye believed to be affected.
Cryptocurrency wallet company Trezor reported a personal data breach affecting roughly 14,000 users via its shipping provider, ShipMonk, warning customers of potential targeted phishing attacks.
Logistics giant Ceva Logistics suffered a cyberattack affecting eight European warehouses and causing shipping delays, while also exposing customer data for major retailers like Valve and Bol.
Internet entrepreneur Kim Dotcom warned in an interview with Tucker Carlson that artificial intelligence could integrate vast personal data, expanding US surveillance and profiling capabilities significantly.
Origin Energy's recent data breach affecting 900,000 customers highlights surging cyber attacks in Australia, as experts warn of increasing financial risks, sophisticated AI scams, and the need for better cybersecurity hygiene.
WhatsApp is piloting optional, privacy-focused age verification methods for users in India to comply with the upcoming Digital Personal Data Protection Act, ensuring young users' data is safeguarded.
Hong Kong's privacy office alerts public to fake e-visa websites stealing personal data, with victims losing up to HK$1,700. Applicants mistakenly used fraudulent sites found via search engines, submitting sensitive info and fees before realizing the scam.
OpenAI is rolling out its ChatGPT Health feature to all US users over 18 across all plans, allowing integration with personal health data. This expansion comes a day after a Florida pastor sued the company over a near-fatal health suggestion, prompting OpenAI to reiterate disclaimers about its services not being for diagnosis or treatment.
Hong Kong's privacy watchdog has ordered the removal of a viral dashcam video showing a heated argument between a driver and passenger, identified as singer David Lui Fong. The video, which escalated into profanity and insults over a GPS map dispute, was deemed personal data under the Personal Data (Privacy) Ordinance, prohibiting uploads without consent.
Hong Kong's privacy watchdog has ordered the removal of a viral dashcam video showing a heated argument between a ride-hailing driver and singer David Lui Fong. The footage, which escalated from a GPS dispute to profanity-laced insults, was deemed personal data, and drivers must obtain consent before uploading passenger footage.
Meta's AI glasses now disable the camera if the recording LED is tampered with, a response to privacy concerns. Despite this, Meta continues to push features that collect user data for AI training, facing ongoing lawsuits and investigations over privacy violations.
French authorities report a significant increase in crypto-linked physical attacks, including abduction and extortion, with 77 cases this year compared to 45 in 2025. Interior Minister Laurent Nuñez announced an expanded security response focusing on intelligence sharing, industry-state cooperation, and cross-border coordination to protect crypto-sector actors.
German authorities have approved JD.com's €2.2 billion bid for Ceconomy, Europe's largest electronics retailer. The approval comes with conditions to protect customer data and grant Berlin monitoring rights.
A new report reveals that EU and US spy agencies are spending millions on commercially available personal data for surveillance purposes. This practice, known as AdInt, uses data collected by the advertising industry to track individuals' locations, preferences, and communication patterns.
Kee Wah Bakery in Hong Kong suffered a ransomware attack on its internal network, potentially exposing employee, customer, and business partner data. The privacy watchdog is investigating the risk of a data leak, while the bakery engages cybersecurity experts.
Hong Kong's privacy watchdog has launched the Hong Kong International Data Privacy Academy to train privacy professionals and align with the city's goal of becoming an international talent hub. The academy will offer seminars, workshops, and expert dialogues, addressing AI and new technology challenges.
The Agirc-Arrco pension scheme is alerting the public to a rise in fraudulent communications, including SMS, calls, and emails, that impersonate the organization to steal personal data. These scams often involve commercial offers unrelated to the pension scheme.
Visual Arts, the company behind the game brand "Key," announced on June 4th that personal information, including customer names, addresses, and supplier My Numbers, may have been leaked due to unauthorized access. The leak was discovered after master data for the new game "anemoi" was found on an overseas site.
Google Labs has launched Dreambeans, an AI-powered app for iOS and Android that generates personalized lifestyle suggestions based on user data from Google services like Gmail, Calendar, and Photos. The app aims to provide curated, AI-illustrated stories to inspire users and combat doomscrolling.
A restaurant owner in Hualien was sentenced to three months in prison, suspended for two years, for illegally using personal data and defaming a performer. The owner posted a video of the performer kissing a female customer, along with personal photos and defamatory remarks, on social media out of revenge.
Urasoe City, Okinawa, reported the theft of 83 business laptops, with 3 containing citizen personal information. While 47 have been recovered, no data leakage or misuse has been confirmed. The incident is suspected to be for resale by a contractor employee.
