GRC Report Staff

7-Eleven Says Franchisee Records Exposed in April Cybersecurity Incident

7-Eleven disclosed that an unauthorized third party gained access on April 8 to certain company systems containing franchisee records, according to a notice sent to affected individuals. The company said the compromised documents included information submitted during the franchise application process, including names, addresses, and other unspecified personal data elements.

OFAC Hits Adani Enterprises With $275 Million Iran Sanctions Settlement

The U.S. Department of the Treasury’s Office of Foreign Assets Control announced this week that Adani Enterprises Limited agreed to pay $275 million to settle allegations tied to 32 apparent violations of U.S. sanctions on Iran after importing liquified petroleum gas that American authorities say actually originated there.

Australian Court Hits Snaffle Operator With $21.7 Million Penalty Over Unlawful Credit Charges

The Federal Court of Australia has ordered the operator of online retailer Snaffle to pay $21.7 million (AUD 33.5 million) in penalties after finding the company unlawfully overcharged tens of thousands of consumers through its credit contracts.

UK Regulators Warn Frontier AI Is Accelerating Cyber Threats Against Financial Firms

Last Thursday, the Financial Conduct Authority, Bank of England, and HM Treasury issued a joint statement warning that frontier AI models are rapidly changing the cyber threat environment facing banks, financial market infrastructures, and regulated firms. The document itself is only a few pages long. No dramatic language. No theatrical predictions about machines overthrowing civilization. Just a steady accumulation of sentences that become more unsettling the longer you sit with them.

FTC Begins Enforcing Take It Down Act as Platforms Face 48-Hour Removal Mandate

The Federal Trade Commission has officially begun enforcing the Take It Down Act, setting a start of a new federal requirement forcing online platforms to remove nonconsensual intimate images within 48 hours of receiving a valid request from victims.

France’s Privacy Watchdog Says the Situation Is “Very Worrying” After a Record Year of Data Breaches

France’s data protection authority received more than 20,000 complaints last year, handled over 6,000 data breach notifications, and issued nearly €487 million in fines as cybersecurity incidents and privacy enforcement continued to intensify across the country.

Deloitte Sees Internal Audit Moving Closer to the Center of Enterprise Risk in 2026

The audit profession has spent years talking about becoming more strategic. Deloitte’s latest outlook suggests that conversation is finally starting to turn into something operational.