







Equifax, one of the “big-three” U.S. credit bureaus, said today a data breach at the company may have affected 143 million Americans, jeopardizing consumer Social Security numbers, birth dates, addresses and some driver’s license numbers.
IDMerit data breach: 1 billion records of personal data exposed in KYC data leak
A massive global data leak linked to IDMerit has exposed 1 billion personal records, including national IDs and emails, across the US, Europe, and Asia.

Over 16% of Japanese companies experience data breaches
According to the survey, 30.2% of large companies suffered or potentially suffered breaches, significantly higher than 14.3% among small businesses.

Data Breach Notification Laws: A 50-State Survey (2026 Edition) | Privacy Rights Clearinghouse
This survey analyzes and compares data breach notification laws across all 50 U.S. states and the District of Columbia. Using a standardized framework of 50 questions, we examined each jurisdiction's requirements for breach notification timing, covered data types, notification recipients, enforcement mechanisms, and consumer remedies.This survey reflects statutes enacted as of January 1, 2026.Explore the Data
AU10TIX: records exposed security breach affecting major apps
An Israeli identity verification company suffered an attack that compromised the personal data of millions of users of popular apps.
Data Leeks: Made with love, leaked by hackers | The Mozilla Blog
Data breaches are on the rise. According to web security experts, the frequency of data breaches almost doubled from 2016 to 2017, and 73% of all U.S. comp

Data of 600,000 Gaza households exposed in WFP cyber-attack
With over 2 million people registered in Gaza, it may be the largest-known breach of humanitarian beneficiary data to date.

Japan data leaks: Which poses greatest risk, licenses, credit cards or My Number cards?
TOKYO -- Leaks of personal information held by companies and other organizations have surged due to unauthorized access. The compromised data ranges f

Pluralistic: The reason you can’t buy a car is the same reason that your health insurer let hackers dox you (28 Jun 2024) – Pluralistic: Daily links from Cory Doctorow
In 2017, Equifax suffered the worst data-breach in world history, leaking the deep, nonconsensual dossiers it had compiled on 148m Americans and 15m Britons, (and 19k Canadians) into the world, to form an immortal, undeletable reservoir of kompromat and premade identity-theft kits:
Massive AfD data breach exposes illegally copied files
The “Alternative for Germany” party apparently suffered a data breach. Some 421,000 emails were published, offering a glimpse inside the party.

Millions of users exposed as Japan data breaches continue to surge | The Asahi Shimbun Asia & Japan Watch
H2O Retailing Corp. is the latest major company among the many in Japan that are disclosing massive data breaches almost daily, which are exposing millions of customer records and revealing weaknesses in corporate cybersecurity.

What the Marriott Breach Says About Security – Krebs on Security
We don’t yet know the root cause(s) that forced Marriott this week to disclose a four-year-long breach involving the personal and financial information of 500 million guests of its Starwood hotel properties. But anytime we see such a colossal intrusion go undetected for so long, the ultimate cause is usually a failure to adopt the most important principle in cybersecurity defense that applies to both corporations and consumers: Assume you are compromised.
Have I Been Pwned: AfD Data Breach
In September 2026, the German political party Alternative für Deutschland (AfD) suffered a data breach which exposed 345k unique email addresses. The following month, hundreds of gigabytes of data containing hundreds of thousands of emails and attachments was published online, with searchable AI-generated summaries and downloadable original files. An analysis of the incident reported that the breach was detected as early as 9 September, with a subsequent intrusion occurring five days later. In its public statement, AfD attributed the breach to an attack on a hosting provider, identified in subsequent reporting as the party-owned Alternita Dienstleistungs GmbH.
[109] Data Falsificada (Part 1): "Clusterfake" - Data Colada
This is the introduction to a four-part series of posts detailing evidence of fraud in four academic papers co-authored by Harvard Business School Professor

Identity Verification Attacks in 2025
See the most egregious cases of identity verification incidents in 2025, with expert commentary and tools to stay ahead of and prevent similar threats.

I Asked 100 Companies for My Data. I Got Deletion Notices Instead
California residents have a legal right to access the data that companies collect about them. Actually exercising that right is a burdensome nightmare.
