PrivacySignal
Analysis ← Front page
Breach

Hundreds of Dutch sports clubs report cyberattack exposing members’ personal data

DataBreaches.net · · International · Data Breaches

A cyberattack on AllUnited, a membership administration platform used by Dutch sports clubs, has triggered data breach reports from more than 350 clubs to the Dutch Data Protection Authority, with that number expected to climb. Personal information belonging to club members may have been exposed.

Why this matters: One attack, one platform, hundreds of clubs — that is the supply-chain problem in plain view. Members did not sign up with AllUnited. They joined a local sports club, handed over their personal details, and had no say in how that data was stored or secured upstream. When a shared platform gets hit, the damage fans out instantly across tens of thousands of ordinary people who never knew the risk existed. This is worth watching as the breach count rises.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy

#breach#gdpr#privacy
Read the original at DataBreaches.net → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
BleepingComputer · · International

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?

Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A bizarre message appeared on the Victorian Curriculum and Assessment Authority (VCAA) website on Wednesday evening, with the hacker mocking the authority’s security and claiming to have obtained and distributed this year’s exam papers....

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Notion says Fireworks breach exposed customer AI chat transcripts

Notion disclosed that a breach at Fireworks AI, a third-party provider powering Notion's AI features, exposed chat transcripts from a limited number of customer workspaces. The incident originated outside Notion's own infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
Microsoft Threat Intelligence · · International

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Threat actors are deploying GSocket on compromised Linux servers to keep encrypted remote access after the original vulnerability is patched. Learn how to detect, investigate, and remediate this activity. The post The global socket: how threat actors are weaponizing GSocket for stealthy C2 appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
Krebs on Security · · International

Who Runs the Ransomware Group Qilin?

The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all point to a 36-year-old man living in St. Petersburg, Russia.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →