TOP NEWS | Major Data Breach at Frontier Communications; Colorado AI Act Amendments Announced; and more

California Settles with Tilting Point Media for $500,000 Over Children's Privacy

Violations

California Attorney General Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a $500,000 settlement with Tilting Point Media for violating the CCPA and COPPA. Tilting Point's game, "SpongeBob: Krusty Cook-Off," collected and shared children's data without parental consent. Besides the civil penalties, Tilting Point must now obtain parental consent for data collection, configure third-party software correctly, and comply with privacy laws. This settlement highlights ongoing efforts to enforce children's online privacy protections and ensure companies adhere to legal requirements. Read more

Colorado AI Act Amendments Announced

Colorado Governor Polis, Attorney General Weiser, and State Senator Rodriguez plan to amend the recently enacted Colorado Artificial Intelligence Act. They aim to refine AI system definitions to focus on high-risk systems, regulate developers rather than smaller companies using third-party AI, shift to traditional enforcement managed by the Attorney General, clarify consumer rights to appeal regarding AI-related discrimination, and align Colorado’s laws with other states to avoid a patchwork of regulations. The legislature will revisit the law in January 2025, with stakeholder feedback and a task force contributing to revisions. This indicates a careful approach to AI regulation and enforcement. Read more

Major Data Breach at Frontier Communications

Frontier Communications experienced a significant data breach, exposing personal information of over 750,000 customers. Unauthorized access to internal IT systems led to the disclosure of names and Social Security numbers. Frontier is notifying affected individuals and has reported the breach to regulatory authorities. The company confirmed that a cybercrime group was likely behind the attack. Frontier provides free credit monitoring and identity theft resolution services for one year to those affected. Read more

AMD Investigates Potential Data Breach by Cybercriminal Group

AMD is investigating a reported data breach after The Cyber Express revealed screenshots of allegedly stolen data. The breach may include information on future products, customer databases, and employee details. The hacker, IntelBroker, posted a sample of the data on BreachForums, including employee names and contact information. AMD is working with law enforcement and a third-party partner to assess the breach. AMD stated that a limited amount of specification data was accessed and believes the breach won't significantly impact business operations. Further details on the breach's scale and data value remain unclear. Read more

FCC Approves $200M Cybersecurity Pilot as LA School District Faces New Data

Breach

On June 6, the FCC approved a $200 million pilot program to bolster cybersecurity for K-12 schools and libraries amidst growing cyberattacks. The approval coincided with the listing of 24 million stolen Los Angeles Unified School District records on a dark web marketplace. The FCC's pilot will fund firewalls and cybersecurity services, providing a minimum of $15,000 per eligible district. The LAUSD breach, attributed to a user named “The Satanic Cloud,” involves sensitive data, including student and employee information. Federal and district investigations are ongoing to determine the breach's origin and impact. Read more