Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

IT Security & Privacy

Pokémon Center Customer Data Exposed in CEVA Logistics Cyberattack

Pokémon Center is notifying customers in the United Kingdom and Germany that personal and order information may have been exposed in a cyberattack on CEVA Logistics, the third-party provider it uses to fulfill and ship orders in those markets.

Privacy Has a Hoarding Problem

For a long time, deleting data could feel strangely reckless. Storage was cheap, and information was potentially valuable. The cost of keeping another year of customer records, internal correspondence, transaction histories or old documents was difficult to see, while the cost of deleting the wrong thing was easy to imagine. So companies kept it. Some of it was retained for legal or operational reasons, some because nobody was quite sure whether it could safely be destroyed, and some because of the most durable retention policy in corporate life: we might need it someday.

HKICL Issues Alert Regarding Fraudulent Websites Impersonating Official Services

The Hong Kong Interbank Clearing Limited (HKICL) has identified two fraudulent websites attempting to impersonate its official platform to deceive users. Compliance teams should note that these scams target personal identification and banking details under the guise of "Buyer Online Protection" services.

HKICL Issues Alert Regarding Fraudulent Website Impersonating Official Services

The Hong Kong Interbank Clearing Limited (HKICL) has identified a fraudulent website attempting to impersonate its official platform by offering fake "Buyer Online Protection" services. Compliance teams should note this as an operational and fraud risk that necessitates heightened vigilance in customer communications and digital security monitoring.

ASIC Surveillance Highlights Weaknesses in Complex Product Governance and Distribution

ASIC has completed a targeted surveillance review of licensees offering high-risk products, identifying significant failures in design and distribution obligations (DDO). The findings emphasize that firms must ensure product governance, particularly for complex derivatives and fractional assets, is robust enough to prevent unsuitable retail investor outcomes.

Uber Freight Investigates Cyber Incident After Hackers Claim Data Theft

Uber Freight says its logistics business is investigating a cybersecurity incident after the hacking and extortion group Helix claimed it had stolen data from the company, according to Reuters, which first reported the incident. An Uber Freight spokesperson told Reuters there had been no impact on business operations and that its systems were operating normally.

South Korea Fines KT $37.4 Million After Rogue Cell Equipment Exposed Customer Data

South Korea’s Personal Information Protection Commission has imposed a $37.4 million (KRW 53.979 billion) administrative fine on KT after concluding that failures in the telecom company’s security controls allowed attackers to reach its internal network and expose the personal information of 16,647 subscribers. The regulator also ordered KT to correct the deficiencies and publish the results of the sanctions, while recommending broader improvements to its privacy program.