IT Security & Privacy

Oxford Investigates CareerConnect Breach After User Information Exposed

Oxford University recently disclosed that CareerConnect's third-party provider, GTI, informed Oxford on May 28 that an unauthorized party had gained access to the platform. According to the notice, the attacker was able to obtain users' first names, last names, and email addresses. For users who do not access the platform through Single Sign-On, encrypted passwords were also exposed.

Dutch Privacy Complaints Jump 75% as Citizens Press Organizations to Honor Data Rights

According to the Dutch Data Protection Authority (AP), more than 13,500 complaints and tips regarding possible privacy violations were submitted in 2025, a 75 percent increase from the previous year. The figures were published Monday in the regulator's 2025 Complaints Report.

AMF Warns AI Is Reshaping Cyber Risk as It Intensifies Oversight of Financial Firms

Artificial intelligence is rapidly changing the cybersecurity equation for financial institutions, and France’s securities regulator wants firms to move faster in adapting their defenses. The French regulator, the Autorité des marchés financiers (AMF), said Thursday that strengthening cyber resilience remains a strategic priority as advances in artificial intelligence create new opportunities for both defenders and attackers.

Carnival Discloses Cyberattack Affecting Nearly 6 Million People After Employee Social Engineering Incident

Carnival Corporation has disclosed a cybersecurity incident that exposed personal information belonging to nearly six million individuals after an attacker successfully used social engineering tactics to gain access to an employee account.

Australians Grow More Concerned About Privacy as Trust in AI Companies Falls to 4%, OAIC Survey Finds

Australians are becoming more concerned about privacy even as businesses and governments push deeper into the digital economy, according to a major survey released Thursday that found public trust in artificial intelligence companies has fallen to strikingly low levels.

France’s Privacy Regulator Calls IQVIA’s Bluff With €5 Million Health Data Fine

A French privacy regulator spent part of its week explaining why a pile of health data with the names removed is not the same thing as anonymity. That distinction just cost IQVIA €5 million.France’s data protection authority, the CNIL, announced the sanction against the company, a subsidiary of the healthcare analytics and consulting giant IQVIA, over its handling of two large health data warehouses containing information sourced from pharmacies and doctors across France.

New Zealand Privacy Commissioner Finds Health NZ & Manage My Health Breached Privacy Rules After Cyber Incident

New Zealand’s Privacy Commissioner released Phase 1 findings from an inquiry into the incident, concluding that both Health New Zealand and Manage My Health breached Rule 5 of the Health Information Privacy Code by failing to ensure reasonable security safeguards were in place to protect patient information.