Tag

Data Breach

All articles tagged with #data breach

Top streamers raise privacy alarms as Discord tightens age checks
technology5 days ago

Top streamers raise privacy alarms as Discord tightens age checks

Discord’s planned March rollout will place many users in a teen-by-default mode, requiring facial scans or IDs to access full features unless an adult is clearly identified. High-profile streamers like Eret, Tubbo and Pikachulita warn this could expose sensitive data after a previous breach of ID photos, even as Discord says facial scans stay on-device and IDs are deleted after age verification. Experts say age-verification should protect minors without eroding trust, urging transparent data handling, while creators seek safety for their communities without compromising privacy.

Discord’s Age Gate Sparks Privacy Backlash After Breach
technology11 days ago

Discord’s Age Gate Sparks Privacy Backlash After Breach

The Electronic Frontier Foundation warns that Discord’s voluntary rollout of age verification—using an age-inference system for most users and forcing government IDs or facial scans via third‑party vendors for some—risks privacy, chilling effects, and misclassification, especially after a 2025 data breach exposed ID data. While Discord claims IDs aren’t linked to accounts and scans stay on-device, privacy risks persist given unreliable facial-age tech and limited audits. EFF urges stopping non-mandated age gates and offers guidance for users facing age gates.

Discord to Roll Out Global Age Verification, Defaulting Accounts to Teen-Only Experience
technology15 days ago

Discord to Roll Out Global Age Verification, Defaulting Accounts to Teen-Only Experience

Discord announced a phased global rollout starting in March that will mark all accounts as teen-appropriate by default. Adults will need to upload a face scan or government ID via a third-party verifier to regain full access to features and channels, with updated safety settings and restricted access to age‑restricted spaces. The plan follows a 2025 data breach affecting about 70,000 users and has drawn criticism over privacy and trust in third‑party verification systems.

Discord rolls out on-device age checks, triggering privacy backlash after 70,000 IDs breached
technology16 days ago

Discord rolls out on-device age checks, triggering privacy backlash after 70,000 IDs breached

Discord plans a global rollout of age verification for adult-content access using on-device facial age estimation or off-device government-ID checks, with selfies kept on the user’s device and IDs verified off-device before deletion. This follows a breach that exposed 70,000 IDs and has sparked privacy and security concerns about data handling and verification accuracy, as some users may avoid verification or find ways to bypass it while Discord contends most users will only verify once.

Moltbook Flaw Exposes Thousands of Emails and API Keys on AI-Only Network
security18 days ago

Moltbook Flaw Exposes Thousands of Emails and API Keys on AI-Only Network

Researchers at Wiz uncovered a serious JavaScript private-key handling flaw in Moltbook, an AI-focused social network, that exposed thousands of user emails and millions of API credentials and could enable impersonation and access to private messages; the flaw has been fixed, underscoring the security risks of AI-generated code and AI-built platforms.

Unprotected Bondu AI Toy Exposes 50,000 Kids' Chat Transcripts
technology27 days ago

Unprotected Bondu AI Toy Exposes 50,000 Kids' Chat Transcripts

Security researchers found Bondu's web console was almost entirely unprotected, letting anyone with a Gmail account access over 50,000 transcripts of children's chats plus personal details. Bondu briefly took the console offline, then relaunched with authentication and said the issue was fixed within hours with no evidence of access beyond the researchers. The incident highlights serious privacy risks in AI-powered toys, the potential misuse of sensitive child data, and the need for stronger access controls and vendor risk management, especially where third‑party AI services may handle such data.

Untold Credential Hoard Exposed: 149 Million Logins Leaked Across Major Platforms
technology1 month ago

Untold Credential Hoard Exposed: 149 Million Logins Leaked Across Major Platforms

A security researcher found an unsecured database containing about 149 million usernames and passwords from services including Gmail, Facebook, Yahoo, Netflix, and more. The data, accessed without authentication and likely compiled by infostealing malware, was hosted on a Canadian provider and expanded over a month before being removed after notification. The breach enables potential account takeovers and identity theft across email, social media, streaming, banking, and government services. Experts advise using unique passwords with a password manager, enabling multi-factor authentication, and monitoring accounts for suspicious activity.

Public Database Leak Exposes 149 Million Logins, Highlighting Infostealer Risk
cybersecurity1 month ago

Public Database Leak Exposes 149 Million Logins, Highlighting Infostealer Risk

A publicly accessible database exposed 149 million account credentials, including 48 million Gmail logins and 17 million Facebook logins, along with government, banking, and education accounts. The researcher who found it suspects infostealing malware collected the data, and the provider took the trove down after being alerted; the leak highlights how unsecured databases can become a goldmine for cybercriminals.

Instagram says no breach as mass password-reset emails spark security questions
technology1 month ago

Instagram says no breach as mass password-reset emails spark security questions

Instagram has denied a data breach after many users received password-reset emails; it says an external party could trigger legitimate reset requests without compromising its systems, while Malwarebytes claims a 17.5 million-account hack (a claim some researchers view as possibly old leaked data). Users are advised to change passwords via the official app and enable extra protections.

Dark Web Cache Exposes 17.5 Million Instagram Users’ Data, Triggering Password-Reset Alerts
technology1 month ago

Dark Web Cache Exposes 17.5 Million Instagram Users’ Data, Triggering Password-Reset Alerts

Malwarebytes reports a dark-web cache tied to a 2024 Instagram API breach exposing about 17.5 million users’ personal details and potentially enabling attackers to trigger password-reset emails. Instagram says there was no breach of its systems and that accounts remain secure. Users are advised to reset passwords, enable two-factor authentication, and consider deleting accounts if concerned.

Illinois health agencies disclose large-scale data breaches affecting thousands of patients
health1 month ago

Illinois health agencies disclose large-scale data breaches affecting thousands of patients

A data breach at Illinois Department of Human Services exposed the personal information of approximately 600,000 patients, including names, addresses, and medical details, due to incorrect privacy settings on public maps from 2021 to 2025. The agency has since restricted access, implemented new security policies, and will notify affected individuals.