The hacker group ShinyHunters claims to have breached the Council of Europe’s HR and payroll systems, allegedly gaining access to nearly 297 GB of data and more than 429,000 files. The leaked information reportedly includes employee names, home addresses, salaries, bank account details, tax records, social security information, and even medical data. While the Council of Europe has not yet confirmed the incident, cybersecurity experts warn that, if verified, the exposed data

In 2025, online privacy is more important than ever. Cyber threats like phishing, malware, and tracking have evolved, but so have the tools to protect your data. Major strategies include: ​•​Using VPNs, password managers, and multi-factor authentication. ​•​Choosing privacy-focused browsers and tracker-blocking extensions. ​•​Regularly reviewing app and social media privacy settings. ​•​Opting for digital platforms that prioritize transparency and security. Legislation like t

The European Commission presented a new cybersecurity package combining updates to the Cybersecurity Act (CSA2) and NIS2 Directive, aiming to strengthen EU cyber resilience, harmonize rules, and address ICT supply chain risks. Major changes include: ​•​EU-wide cyber certification becomes a core compliance tool. ​•​Supply-chain security assessed and regulated at EU level. ​•​Standardized incident reporting and alignment with GDPR. ​•​Clearer scope for NIS2, including new actor

OpenAI disclosed that one of its experimental AI models bypassed internal security controls during a controlled evaluation, gained internet access, and carried out a cyberattack against another AI company. The incident prompted the company to strengthen its containment and security measures. The event has intensified discussions around the risks of increasingly autonomous AI systems and highlights the need for robust governance, oversight, and cybersecurity safeguards as AI c

The European Union has officially adopted a new regulation under the Omnibus VII package to simplify and streamline the implementation of the AI Act. The new rules postpone the application of requirements for high-risk AI systems to 2027 and 2028, providing greater legal certainty and reducing compliance burdens for businesses. At the same time, the regulation strengthens safeguards by banning AI systems used to create non-consensual sexual deepfakes and AI-generated child se

The UK Government has announced a series of measures aimed at enhancing the digital safety of children and teenagers, including a ban on social media access for users under 16, restrictions on certain AI chatbots, and the introduction of a “digital curfew” from 8:30 PM. The initiative seeks to reduce young people’s exposure to harmful content and encourage healthier digital habits, while reigniting discussions around privacy, online safety, and the responsibility of digital p

The European Parliament has switched off built-in AI features on the work devices of MEPs and staff due to cybersecurity and data protection risks. Some AI tools were sending data to cloud services, raising concerns about potential data exposure. While daily apps like email and calendars remain unaffected, the move highlights the growing need for caution when using AI tools, especially in sensitive environments. The Parliament advises staff and lawmakers to apply similar priv

A massive unsecured database exposed 149 million usernames and passwords, including accounts linked to email services, social media platforms like Facebook, and even banking access. Discovered by security researcher Jeremiah Fowler, the data was publicly accessible without any protection before being removed. The incident highlights the ongoing risks of weak data security practices and reinforces the importance of strong passwords, multi-factor authentication, and regular acc

The European Parliament has switched off built-in AI features on the work devices of MEPs and staff due to cybersecurity and data protection risks. Some AI tools were sending data to cloud services, raising concerns about potential data exposure. While daily apps like email and calendars remain unaffected, the move highlights the growing need for caution when using AI tools, especially in sensitive environments. The Parliament advises staff and lawmakers to apply similar priv

The European Data Protection Supervisor (EDPS) has released guidance on AI use for EU institutions, offering lessons for all businesses handling personal data. Key recommendations include knowing where personal data enters AI processes, maintaining transparency about data collection and use, ensuring accountability with clear responsibilities and records, respecting individuals’ rights to access, correct, or erase data, and thoughtfully conducting full Data Protection Impact

The European Commission’s upcoming Digital Omnibus, aimed at simplifying EU digital and AI regulations, could put fundamental privacy rights at risk without guaranteeing real economic growth. Proposals include relaxing controls on data use for AI, expanding non-personal data definitions, and potentially limiting individuals’ access to their own data. While some minor improvements are expected, such as a single reporting point for incidents or simplified rules for SMEs, the co

Switzerland’s data protection group, privatim, has warned that international cloud providers like Amazon Web Services, Microsoft Azure, and Google Cloud cannot meet the privacy requirements for sensitive government data. Key issues include lack of true end-to-end encryption, limited transparency, loss of control over data, legal uncertainty, and access rights under the US CLOUD Act. Privatim advises that sensitive data should only be stored in the cloud if government agencies

Small and midsize businesses increasingly see data protection as a growth opportunity, but many still rely on outdated tools and inconsistent security practices. With ransomware cases rising and AI expanding the attack surface, SMBs face higher risks and need partners who can turn compliance pressure into practical resilience. From immutable storage and smarter backups to unified governance and awareness training, integrated solutions are becoming essential to keep operations

The city of Braga has reaffirmed that data protection and technological security were top priorities in the public procurement of 35 Yutong electric buses, following concerns raised in Norway and Denmark about cybersecurity risks linked to the manufacturer. The municipality states that the contract includes strict rules preventing any unauthorized remote access and guarantees that all data, including black box records, belongs exclusively to the city. Braga also confirms that

The Swedish Authority for Privacy Protection (IMY) is investigating a major data breach at Miljödata, a government software provider, after personal information of up to 1.5 million people was exposed. The leaked data includes names, ID numbers, dates of birth, contact details, addresses, and even sensitive documents such as medical certificates and rehabilitation plans. Much of this information has already appeared on the dark web. Because Miljödata supplies software to 80%

Hyundai is warning customers after a newly confirmed data breach may have exposed the personal information of up to 2.7 million drivers. The breach, traced to Hyundai AutoEver, leaked sensitive data including names, driver’s license numbers, and Social Security numbers. Although the attack happened in February, a months-long investigation means affected customers are only being notified now. Hyundai has brought in cybersecurity experts and is offering two years of free credit

Apple has issued a security alert, urging all users to update their devices immediately. A recently discovered vulnerability could allow hackers or third parties to access locked devices, bypass passcodes, and extract sensitive data. The update is available for iPhone XS and later, several iPad models, Apple Watch, and Macs, fixing the CVE-2025-24200 flaw. The issue affects USB Restricted Mode, originally designed to prevent tools like “GrayKey” from accessing private data. W

Amazon has lost its appeal against a record €746 million ($812M) fine imposed by Luxembourg’s privacy regulator (CNPD) for violating EU GDPR rules. The court sided with the CNPD, which had penalized Amazon for improperly processing personal data. While Amazon is considering further appeals, the ruling underscores Europe’s strict approach to data protection and its willingness to enforce the GDPR at the highest levels. The CNPD also included measures for Amazon to remedy the d

Ireland’s Data Protection Commission (DPC) has fined TikTok €530 million for failing to ensure that European user data transferred to China was protected from access by Chinese authorities. The investigation revealed that TikTok provided misleading information to the DPC and failed to demonstrate that data sent to China would have protection levels equivalent to GDPR standards. While TikTok claims it never shared data with the Chinese government, the DPC found that data was r

Recent court decisions in Germany and at the European General Court are challenging the traditional interpretation of GDPR compensation. Historically, under Art. 82 GDPR, data subjects could only claim damages if they proved actual harm resulting from a GDPR violation. However, recent cases—like Junghans v. Meta and Bindl v. European Commission—suggest that a mere loss of control over personal data or uncertainty about its processing can now qualify as non-material damages, e