Topic
The practice and legal duty of notifying affected individuals and regulators after a data breach, including how incidents are characterized and sized.
FTC Chair Andrew Ferguson said on September 25 that AI agents are tools and the developers who instruct them are liable for the harm they cause. Companies that run other firms' agents now have to work out whether giving the instructions makes them the developer he means.
Reality
The Toronto hospital says the flaw sits in software used by other organizations too. It has not said which software, which leaves those organizations nothing to act on.
Perspective Coverage
4 publishersReality
Belgium's French-speaking gymnastics federation has confirmed that an intruder reached part of its IT environment and took data out. The table tennis federations, alerted Thursday, say checks of their systems and their web provider have found no sign of compromise so far.
Reality
LMU Munich detected the intrusion on Wednesday and disclosed it on Saturday, and it still cannot say when the access began or how many of its more than 52,000 students are in the enrollment file.
Reality
A forum post on 13 September claimed 2,889,256 Claro Dominicana customer records, each carrying the serial number of the line's SIM. Nobody has verified it, and the SIM serial is the field that should drive the response.
Reality
The payment firm says its servers went dark on September 14 after an intruder probably reached internal systems, and that customer emails, IBANs, transaction histories and hashed passwords may have been exposed.
Reality
Revolut says its core systems were never touched, and that staff approved fraudulent information requests because the sender's domain was genuine and the email authentication valid. It is applying for a deposit-taking licence in Israel.
Reality
The company says it learned on or around September 1 that data in customer accounts on its cloud may have been copied, and its notice lists names and ID numbers but not the licence scans Nexus was selling.
Perspective Coverage
6 publishersReality
Greenberg Traurig says an intruder took client documents and posted them on the dark web. The doubling behind that story is nearly 60 law-firm matters inside BakerHostetler's 1,250-incident book for 2025.
Reality
The late-August update stresses text-based fields and untouched seed phrases, while the earlier regulatory filings list passport numbers, dates of birth and two-factor details, and both descriptions are accurate at once.
Reality
The breach notice rules out credit card details and confirms names, mobile numbers, order totals and postcodes. The second list is the one that makes a refund-scam call work.
Reality
France's DGFiP confirmed tax and property data exposure for 678,000 filers while GitLab fixed an unauthenticated project-deletion bug. Both arrived with figures a team can act on.
Reality