Topic
personal-data
Technology Reverse-Lookup Service Exposed Millions of Photos of People's Faces
Independent security researcher Jeremiah Fowler found that the people-search service ClarityCheck left more than 9 million image files, including photos of faces, publicly accessible in an unsecured Amazon S3 bucket. A second misconfiguration exposed email addresses and phone numbers. The company secured the data after WIRED reached out but disputed that the data was publicly exposed.
Regulations & Compliance CBP Workers Allegedly Used Government Databases to Spy on Exes and Colleagues
WIRED obtained internal records showing hundreds of allegations that CBP employees and contractors misused government databases for personal reasons, from romantic inquiries to tracking coworkers. The alleged misconduct spans 2009–2022 and includes referrals to criminal investigators. A DHS employee's use of ad-tech location data to track coworkers is the first known internal abuse case of its kind.
23andMe Data Breach Victims Awarded $47 Million Payout by Bankruptcy Judge
A California bankruptcy court judge ruled that Chrome Holding, which acquired 23andMe after its bankruptcy, must pay $46.75 million to victims of a 2023 data breach that exposed personal and genetic data of up to 6.9 million people. The settlement will be distributed by Kroll Restructuring, with payment due within five business days.
Technology Incogni Report Reveals Job-Search Platforms Selling User Data Without Awareness
A new report from Incogni reveals that leading job-search platforms are selling users' sensitive data to third parties, often without users' awareness. ZipRecruiter, LinkedIn, and Monster rank highest for data collection and sharing. Only 7% of surveyed job seekers expressed concern about privacy risks.