In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Security & Breach NotificationWhat happened On October 5, Denmark s government confirmed unauthorized access to the Central Register of Persons (CPR), a national database with records for about 11 million people, including decease
Security & Breach NotificationWhen the Technical University of Denmark (DTU) revealed that hackers used compromised credentials to access its identity and access management (IAM) system, exposing data on up to 200,000 individuals,
Security & Breach NotificationThe question at hand Your security budget request is on the CFO s desk. You re asking for continuous monitoring tools, automated threat detection, and enhanced software validation processes. The respo
Security & Breach NotificationWhen an external-facing system becomes the entry point for unauthorized data access, you re facing a choice that should have been made months earlier: which API appropriate technical and organisationa
Get weekly security insights and compliance updates delivered to your inbox.
Security & Breach NotificationWhen the CNIL imposed a €500,000 fine on Hôpital Privé de la Loire in 2025, it wasn t due to sophisticated malware. The attacker used a single compromised user account to access data on 524,867 patien
Security & Breach NotificationWhen Fishbrain discovered unauthorized access to its user environment on August 19, the breach had been ongoing for about three weeks. This detection gap turned a manageable incident into a full passw
Security & Breach NotificationThe €500,000 fine against HÔPITAL PRIVÉ DE LA LOIRE after attackers accessed data on 524,867 patients highlights how persistent security myths put healthcare organizations at regulatory and operationa
Security & Breach NotificationAn unauthorized party accessed around 5,000 Dropbox accounts by exploiting a flaw in Lenovo s email verification system. The attack succeeded because Dropbox accepted Lenovo IDs as part of its authent
Security & Breach NotificationWhen unauthorized access affects millions of patient records and the forensic investigation takes months, your notification script can t be a placeholder. It needs to be a comprehensive communication
Privacy Governance & DesignThe common belief is that algorithmic fairness audits are essential for GDPR compliance. Run your models through bias detection tools, document the metrics, and you re supposedly covered under Article
Security & Breach NotificationYour incident response team just declared the breach over. Systems are back online, customers can log in, and your board s been briefed. But here s what nobody s asking: did you actually remove the at
Supervisory Authorities & EnforcementWhen your IT infrastructure spans multiple jurisdictions, you re not just managing servers and APIs. You re dealing with various supervisory authorities, each with its own enforcement priorities. The
Security & Breach NotificationWhen Oracle warned Nissan of a zero-day exploit in PeopleSoft, the carmaker was already compromised. Between May 27 and June 9, attackers linked to the ShinyHunters group accessed sensitive employee d
Security & Breach NotificationThe Conventional Wisdom When ransomware operators demand payment, the standard advice is clear: don t pay. The FBI , CISA warns against it, and your cyber insurance policy likely advises refusal. The
Security & Breach NotificationThe Manchester Airports Group breach exposed 8.7 million customer records because attackers exploited the expanded attack surface that comes with remote work. When your team connects from coffee shops
Security & Breach NotificationOverview of the Breach France s General Directorate of Public Finances (DGFiP) confirmed a personal data breach affecting about 600,000 individuals and businesses. The exposed data included tax identi
Supervisory Authorities & EnforcementWhen Geoffrey Smith accessed 490 personal records at Herefordshire Council over four days, he didn t hack into the system. He used his legitimate access to view sensitive information like children s m
