News
C
csoonline.com
·
· International
Bidding war for defunct Spirit Airlines’ employee data will not die
Bidding war for defunct Spirit Airlines’ employee data will not die csoonline.com
Search & browse the archive
The full corpus — beyond today's front page.
13 results
Breach
Oncology Firm Novocure Announces Cyberattack and Data Breach
Novocure, a medical technology company focused on oncology, has confirmed a cyberattack that exposed data belonging to patients and employees. The company has not publicly detailed the scope of the breach or the type of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
News
Spirit Airlines Wants to Sell Its Data to Google. Former Flight Attendants Are Freaked Out
Spirit Airlines, currently in bankruptcy proceedings, is reportedly exploring a deal to sell customer and employee data to Google. Former flight attendants say they were not aware their personal information could be sold off as part of the airline's assets.
Who should care: General readers · AI governance · Policy
#ai
Read original →
Breach
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen
The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.
Who should care: Cybersecurity · Privacy officers · Administrators
Breach
Patient & Employee Data Exposed in Baylor Genetics Cybersecurity Incident
Baylor Genetics, a company specializing in clinical diagnostic genomics, has disclosed a cybersecurity incident that exposed data belonging to both patients and employees. The company has not publicly detailed the scope of the breach or the types of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
AI Governance
H
HR Executive
·
· International
Anthropic’s trust reckoning raises questions for workplace AI policy
Anthropic is facing a trust reckoning that is prompting organizations to reconsider how they set policy around AI use at work. The situation puts a spotlight on how employers handle employee data, decision-making authority, and accountability when AI tools are involved.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Breach
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Breach
California Child Care Company Discovers 9-Year Employee Data Leak
Child Care Resource Center, a California-based child care organization, disclosed a data breach that exposed employee data over a period of approximately nine years. The breach was attributed to internal employee practices rather than an outside attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
News
Employee Data
The input is extremely thin — just a headline and what appears to be a source attribution with no substantive excerpt content. I cannot write a factual briefing without inventing details the input does not support. Could you provide the actual excerpt or a bit more context about what the CPPA publi
Who should care: General readers · Privacy officers · Policy
#privacy
Read original →
Breach
Data Security Incidents Announced by Park Dental Research Corp; Wabi Sabi Behavioral Health Center
Park Dental Research Corporation in Oklahoma and Wabi Sabi Behavioral Health Center have each disclosed data security incidents involving employee data. Both organizations operate in healthcare-adjacent sectors, placing the breaches within the scope of HIPAA reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Breach
Critical
Nissan discloses employee data breach linked to Oracle zero-day attacks
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Breach
Why Amazon Dropped Its OpenAI Movie, Data Center Workers Fight Back, and Meta Leaks Employee Data
Amazon's MGM Studios has shelved a planned film about OpenAI, reflecting the growing and complicated entanglement between the AI industry and Hollywood. Separately, data center workers are organizing in response to labor concerns, and Meta experienced a leak exposing employee data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
News
Invitation for Preliminary Comments - Notices & Disclosures and Employee Data
The California Privacy Protection Agency is soliciting early public input on two areas: how businesses communicate privacy notices and disclosures, and how employee data is handled under California privacy law. The pre-rulemaking step signals the CPPA is laying groundwork for future regulatory action in both areas.
Who should care: General readers · Privacy officers · Policy
#privacy
Read original →