Data Security

The ICO's investigation found that prior to January 2025, Reddit had not conducted a Data Protection Impact Assessment (DPIA) on the risks associated with processing the data of users aged 13 to 18, including those under 13.

Organizations have lost $19.5 million on average due to insider risk incidents last year, with 53% or $10.3 million associated with employee negligence concerning shadow AI, Infosecurity Magazine reports.

Burger King France and Wendy's UK were alleged to have been compromised by the threat actor "Eliasxy," who published datasets allegedly stolen from the fast food chains on the dark web over the weekend, reports Cybernews.

South Carolina-based molecular diagnostics firm Vikor Scientific, which has since been rebranded as Vanta Diagnostics, was noted by the Department of Health and Human Services' health breach tracker to have had information from 139,964 individuals compromised in a November data security incident against its revenue cycle management solutions provider Catalyst RCM, which was claimed by the Everest ransomware gang, SecurityWeek reports.

Security researchers at Oversecured scanned 10 mental health apps, uncovering a total of 1,575 vulnerabilities, including 54 rated as high-severity.

In 2020, the ICO fined DSG Retail the maximum £500,000 under the Data Protection Act 1998.

The controversy began when researchers questioned if their bug bounty submissions were being used to train HackerOne's AI agents.

The breach, stemming from a coding error, led to the exposure of customer business contact details, including names, emails, phone numbers, and addresses.