2026 has seen a surge in sophisticated cyberattacks, impacting critical infrastructure, government agencies, and private companies. From massive data breaches like DOGE's alleged Social Security database leak to targeted attacks on water systems and energy grids, the year highlights the growing threat of digital warfare and ransomware.
The Department of Homeland Security's SAVE Program expansion is raising alarms among experts who fear it could lead to voter disenfranchisement and data breaches. The program, intended to verify benefit eligibility, is being used to cross-reference voter data, potentially purging eligible voters.
South Korea's Personal Information Protection Commission has imposed a record 624.7 billion won in fines on Coupang for a massive personal data leak affecting 37.5 million individuals and illegally collecting online activity records of over 10 million users. The fines include 423.6 billion won for the data breach and 211 billion won for unauthorized data collection.
France's CNIL has requested a €1.8 million fine against Voyageurs du Monde for data protection violations following a 2023 cyberattack. The company disputes a CNIL requirement regarding data retention periods, arguing it needs to keep client data longer for business reasons.
As of mid-2026, cybersecurity threats persist amid global crises. Major hacks include Social Security data exposure, attacks on European water/energy grids, Iranian cyberattacks on US infrastructure, and breaches at Instructure, FBI, and Hasbro, highlighting vulnerabilities in critical systems and open-source software.
This week's US security and privacy news includes a former Phoenix officer's involvement in shootings, a lawsuit against an NYPD officer, the Take It Down Act for nonconsensual nudes, FTC settlements, ALPR legislation, a GitHub data breach, and European nations seeking US-free tech alternatives.
Athletes are increasingly targeted by cybercriminals using AI-driven scams, data breaches, and social media exploitation, with significant financial losses reported in the sports industry.
Instructure, the maker of the Canvas learning platform, has reached an agreement with the hacker group ShinyHunters after two separate data breaches. The company claims the stolen data has been destroyed, though financial terms remain undisclosed.
A global data leak involving learning platform Canvas has exposed the personal information of more than 72,000 students and staff across Hong Kong educational institutions, with authorities warning of further threats targeting those affected. As of Tuesday, seven local educational institutions had reported data breaches to the Privacy Commissioner for Personal Data, including major universities such as the Hong Kong University of Science and Technology (HKUST), Polytechnic University and City...
