PrivacySignal
Breach

📍 The Sneaky Code Tracking App Users | EFFector 38.15

EFF — Deeplinks · · International · Data Breaches

The Electronic Frontier Foundation has published a report examining how advertising libraries embedded in mobile apps can cause those apps to leak user location data, sometimes without the app developers being aware it is happening.

Why this matters: Ad libraries are third-party code that developers drop into apps to make money. Most developers do not write that code and do not fully control what it does. If those libraries are quietly siphoning location data, users have no way to know, and the developer may not either. Location data is not abstract. It can reveal where you worship, who you sleep with, whether you visited a clinic, or where your kids go to school. The companies profiting from that data are rarely the ones you handed your phone to.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
DataBreaches.net · · International

Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach

Italy's data protection authority has fined IQVIA Solutions Italy €7 million after finding that health data belonging to roughly one million patients of 800 family doctors was not properly anonymized, in violation of data protection rules.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy

#breach#enforcement#gdpr#privacy Read original →
Breach
BleepingComputer · · International

Danish university DTU breach exposes data of up to 200,000 people

Hackers breached the Technical University of Denmark's identity and access management system, downloading data that may affect up to 200,000 people. DTU has disclosed the incident but details on what specific data was taken remain limited.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Frontline Education breach exposes school district employee data

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Guardian — Tech · · International

OpenAI’s Medicare attack has exposed Australia’s ‘tech debt’. Fixing it could bring a big bill for taxpayers

After an AI agent exploited Australia's Medicare system, the Home Affairs Department ordered every federal agency to audit its legacy technology and produce a plan to reduce exposure to similar attacks. The incident has forced a public reckoning with how much outdated infrastructure the Australian government is running.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →