TOP NEWS | OpenAI Security Breach Raises Concerns Over AI Safety; Infosys McCamish Ransomware Breach Affects 6 million and more

Senate Pushes for Federal Privacy Legislation Amid House Stalemate

The Senate is moving forward with federal privacy legislation as the House struggles with the American Privacy Rights Act. On July 11, Senate Commerce Chair Maria Cantwell emphasized the urgency for privacy laws due to AI-related consumer harms. The hearing focused on privacy policies and standards. Cantwell supports the APRA, while Ranking Member Ted Cruz opposes it, citing regulatory overreach concerns. Ongoing discussions aim to reconcile differences and advance the bill in Congress. Read more

Massive Data Breach Exposes mSpy's Customers and Operations

mSpy, a phone surveillance app, suffered a significant data breach in May 2024, exposing millions of customers and internal documents. Attackers stole customer support tickets dating back to 2014 from mSpy's Zendesk system, revealing personal information and emails. The breach disclosed sensitive data of mSpy's users, including requests for support from various U.S. officials and law enforcement. Despite the breach, mSpy's parent company, Brainstack, has not acknowledged the incident. This breach highlights the ongoing risks and privacy concerns associated with spyware applications. Read more

Change Healthcare Data Breach Affects Millions of Americans

Change Healthcare disclosed a cyberattack in February 2024 that compromised the data of approximately one-third of Americans. The company announced on its website that it would start mailing letters to affected individuals on June 20, following a detailed data review. The breach, beginning on February 21 and confirmed on April 22, involved health insurance information, medical records, billing details, and other personal data. Impacted individuals can enroll in two years of free credit monitoring and identity theft protection services. The HHS Office for Civil Rights has yet to post the number of affected individuals. Read more

Infosys McCamish Ransomware Breach Affects 6 million

Infosys McCamish Systems (IMS) has disclosed that the 2023 LockBit ransomware attack impacted over 6 million people. The breach, occurring between October 29 and November 2, 2023, compromised sensitive data, including Social Security Numbers, medical records, and financial information. IMS attempted to negotiate with the attackers but was unsuccessful. Victims are offered 24 months of credit monitoring and identity theft services. The breach affected several companies, including Bank of America and Fidelity Investments. IMS faces class action lawsuits and significant financial losses due to the attack. Read more

OpenAI Security Breach Raises Concerns Over AI Safety

A 2023 security breach at OpenAI allowed a hacker to access internal discussions about AI advancements. The incident, initially undisclosed, sparked concerns about foreign adversaries, particularly China, stealing sensitive AI information. OpenAI confirmed the breach but stated no customer data was compromised and believed the hacker was not state-sponsored. Criticism of OpenAI’s security measures led to the dismissal of a former employee. The breach has intensified debates about the national security implications of AI and calls for stricter cybersecurity measures in AI companies. Read more