privacy

An unauthenticated API flaw in the Pope's official prayer app exposed names, emails, and birth dates of over 719,000 users for six months before a fix.

Federal prosecutors have charged Atlanta activist Samuel Tunick under a rarely used destruction-of-property statute for allegedly wiping his phone with GrapheneOS's duress password during a border search.

A breach at gig-work platform Paidwork exposed names, bank details, and bcrypt-hashed passwords for over 23 million users, per Have I Been Pwned.

A 42-attorney-general coalition settled bankruptcy claims against 23andMe for $18 million over the 2023 breach of 6.9 million genetic profiles, days after a court barred California from separately pursuing damages.

Meta is rolling out a mandatory update that disables its smart glasses' camera if the privacy LED is tampered with, even as it reportedly tests always-on glasses that would skip the light entirely.

New York's Unified Court System will bar recording-capable eyewear from its 1,240-plus courts starting July 20, the first statewide blanket ban of its kind.

A cyberattack on the UN World Food Programme's Palestine registration app exposed personal data of about 600,000 Gaza households, drawing criticism over a 17-day notification delay.

An EFF analysis of millions of Flock Safety ALPR searches reveals law enforcement using crime-fighting surveillance tools for school residency fraud checks, employment background investigations, and noise complaints — with no warrant required.

The FTC settled for $930,000 total after CMG and two partners falsely claimed their 'Active Listening' service captured real-time smart-device voice data to deliver hyper-local ads — it was actually resold email lists.

Democratic senators led by Markey and Merkley warn a $7.5M DHS smart glasses proposal would let ICE agents covertly identify people in public using facial recognition.

Eric Migicovsky's rePebble introduces the Index 01, a battery-free smart ring that captures voice notes with a button press, skipping health tracking and subscriptions entirely.

The FTC settled its 2022 lawsuit against Kochava and subsidiary Collective Data Solutions, barring the companies from selling precise location data without affirmative express consent in the most significant U.S. enforcement action against a location data broker.