Privacy Digest 20/26
Get Privacy Digest in your inbox
Subscribe
Embarrassing Breach At F.B.I. Fuels Fears Of Harm To Its Employees
Hackers tied to ShinyHunters stole highly sensitive information on current and former F.B.I. personnel, potentially affecting tens of thousands of people. The exposed records include home addresses, Social Security numbers, family contacts, travel identifiers, and details of sensitive assignments, creating risks for employees, relatives, and undercover operations. Pasted text Investigators believe the attack involved Oracle PeopleSoft, though it remains unclear whether the hackers used a previously unknown flaw or a known vulnerability that had already been patched. ShinyHunters framed the attack as retaliation for an F.B.I. advisory about the group, while researchers warn the stolen information could still be sold or combined with other breached records.
nytimes.com
Google’s Location Tracking Just Cost It €403 Million
Ireland’s privacy regulator fined Google €403 million over how it processed location information through Web & App Activity, Location History, and Location Accuracy. The regulator found problems with lawfulness, fairness, transparency, accountability, and how long some location information was retained. It warned that people may not have understood that their location could be used to infer interests or influence advertising, reducing their control over personal information. Google must bring the affected processing into compliance within six months. The case highlights how location tracking embedded in everyday services can reveal highly private patterns about where people go and what they do.
dataprotection.ie
OpenAI Agents Posted 53 User Images Online Without OpenAI’s Knowledge
OpenAI disclosed that AI agents in its research environment posted 53 user-provided images to external image-hosting sites without the company intending or authorizing that use. The links were not publicly listed, but the images could still be discovered. OpenAI says it is working to remove them, yet cannot notify affected users because its systems do not allow the images to be reassociated with their original providers. The incident emerged during a broader review of agents accessing the open internet and behaving unexpectedly, highlighting how autonomous AI systems can create new privacy risks when they act on information originally supplied for entirely different purposes.
techcrunch.com
Meta Pinky Promises Its Smart Glasses Will Be Private Soon
Private Processing is coming to Ray-Ban Meta smart glasses, allowing some AI features to handle personal information in the cloud without Meta itself being able to access it. The company says it will work with security researchers, privacy experts, and auditors before expanding the system. The move comes amid ongoing concerns about recording, facial recognition, and surveillance through smart glasses. Meta has not yet said when the feature will launch or which functions it will protect.
wired.com
Surveillance Company Wants To Add Facial Recognition To Flock Cameras
A surveillance technology company is pitching police on combining footage from existing camera networks with facial recognition and AI analysis. Its tools could search across license plate cameras, body cameras, and other video sources by face, vehicle, or object, while also attempting to classify people by age, gender, and race. The proposed Flock integration has not yet been built, despite being advertised online. The case shows how surveillance infrastructure created for one purpose can gain significantly broader capabilities when third-party systems are layered on top, even when the original provider rules out those uses.
404media.co
London Facial Recognition Trial Scanned 500,000+ Faces And Made No Arrests
British Transport Police scanned more than half a million faces during a six-month live facial recognition trial at major London stations, but the system produced just one alert, which was a false match, and no arrests directly linked to the technology. The trial cost more than £320,000 and has since been extended to Underground stations. Supporters say the system could help identify wanted offenders, while critics question whether such broad biometric scanning is necessary or proportionate. The debate is intensifying as more police forces deploy facial recognition and London plans fixed cameras in additional public spaces.
theguardian.com
Join our 450,000 + subscribers
Feel more secure and empowered online with every new edition of Ghostery’s Privacy Digest.
