Ireland fines LinkedIn €310 million over targeted advertising

LinkedIn received a €310 million fine from the Irish Data Protection Commission for violating European Union’s law related to the processing of personal data for behavioral analysis and targeted advertising. The penalty follows an inquiry into the lawfulness, fairness, and transparency of LinkedIn’s data processing, which started from a complaint several years ago from French non-profit org La Quadrature […]

CISA proposes new security requirements to protect govt, personal data

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is proposing security requirements to prevent adversary states from accessing American’s personal data as well as government-related information. The requirements are aimed at entities that engage in restricted transactions that involve bulk U.S. sensitive personal data or U.S. government-related data, especially if the info is exposed to “countries […]

Finland seizes servers of ‘Sipultie’ dark web drugs market

The Finnish Customs office took down the website and seized the servers for the darknet marketplace ‘Sipulitie’ where criminals sold illegal narcotics anonymously. The agency’s announcement earlier today says that the site catered to both Finnish and English-speaking users, and that its operator claimed a turnover of 1.3 million Euros (approximately $1.42 million). The operation was possible […]

Ukraine arrests rogue VPN operator providing access to Runet

Ukraine’s cyber police have arrested a 28-year-old man who operated a massive virtual private network (VPN) service, allowing people from within the country to access the Russian internet (Runet). Runet is the portion of the internet that includes Russian sites on the “.ru” and “.su” top-level domains, including government sites, social media platforms, search engines, and […]

Marriott settles with FTC, to pay $52 million over data breaches

Marriott International and its subsidiary Starwood Hotels will pay $52 million and create a comprehensive information security program as part of settlements for data breaches that impacted over 344 million customers. The settlement requires Marriott and Starwood to implement a comprehensive security program and allow their U.S. customers to request personal data deletions. Additionally, the American […]

UK nuclear site Sellafield fined $440,000 for cybersecurity shortfalls

Image: Sellafield nuclear power station and reprocessing plant (Steve_Allen) Nuclear waste processing facility Sellafield has been fined £332,500 ($440k) by the Office for Nuclear Regulation (ONR) for failing to adhere to cybersecurity standards and putting sensitive nuclear information at risk over four years, from 2019 to 2023. According to the ONR announcement, Sellafield failed to follow […]

U.S. charges Joker’s Stash and Rescator money launderers

The U.S. Department of Justice (DoJ) has announced charges against two Russian nationals for operating billion-dollar money laundering services for cybercriminals, including ransomware groups. The charges involve money laundering, bank fraud, and facilitating websites that sell stolen credit card information and personal data. The two individuals are Sergey Ivanov, using the alias “Taleon,”and Timur Shakhmametov (a.k.a. “JokerStash” […]