Hackers breached the MyDr medical platform, potentially compromising sensitive data belonging to nearly 19 million Polish patients. The platform is used by thousands of clinics and medical practices, dramatically increasing the scale and impact of the breach. The stolen information reportedly includes highly sensitive medical data, with politicians and other public figures among those affected. […]
The EDPS is deeply concerned about the European Commission’s plans to significantly expand Europol’s powers. Europol would soon be permitted to process personal data for long periods from individuals with no demonstrable links to crime. The watchdog warns of the increased volume of data, new data categories, and insufficient oversight and safeguards. The EDPS demands, […]
Supermarket chain Sainsbury’s has committed another painful blunder with its facial recognition software. An innocent customer was wrongly identified as a shoplifter, after which he was publicly removed from the supermarket and prevented from paying for his groceries. Although Sainsbury’s later acknowledged the error and offered £150 in compensation – which the customer immediately donated […]
Microsoft warns of CaptiveCrunch, a global campaign in which Storm-2945 manipulates hotel, conference, and other guest networks to attack business travelers. Through hijacked captive portals, victims are redirected to phishing pages or misled with fake browser and Windows updates that install malware. The CornFlake RAT and ChocoShell used can steal passwords, cookies, Microsoft 365 tokens, […]
Meta must pay 567 million dollars (€492 million) because a judge ruled that Facebook and Instagram harmed the mental health of children. The judge in New Mexico even labeled Meta’s impact as a ‘public nuisance’, comparable to the societal consequences of air pollution. Meta must implement stricter age verification, remove accounts of children under 13, […]
eIDAS 2.0 requires all EU member states to offer at least one certified European Digital Identity (EUDI) Wallet by the end of 2026 at the latest. The wallet gives approximately 450 million Europeans more control over digital identity data and credentials, with privacy and data minimization as the starting point. From 2027, banks, telecommunications companies, […]
Dutch regulators (ACM, AFM, AP, DNB, and RDI) are calling on the government and the business community to make digital autonomy a strategic procurement criterion and to become less dependent on a small number of (mostly non-European) IT providers. Open standards, interoperability, and switching options must reduce vendor lock-in and increase cyber resilience. As a […]
A security incident at logistics partner CEVA Logistics may have led to a data breach of customer information from bol and de Bijenkorf. Potentially compromised data includes names, addresses, email addresses, phone numbers, track & trace information, and order details. Bol and de Bijenkorf have informed the Dutch Data Protection Authority and are warning affected […]
Apple is challenging the UK government’s renewed demand for access to encrypted iCloud backups of British users through the Investigatory Powers Tribunal. The tech giant reiterates it will never build a backdoor into its products, arguing it would weaken security for everyone. The UK says lawful access is essential for tackling terrorism, serious crime, and […]
As of August 2, the first transparency obligations under the European AI Act have come into effect. In Met het Oog op Morgen, tech expert Bert Hubert clearly explains that organisations remain responsible for the deployment of AI – you cannot hide behind “the AI did it.” Furthermore, the use of AI in recruitment procedures […]