In November 2025, the Department of Veterans Affairs entered into an agreement with Baylor Genetics to provide nationwide pharmacogenomic (PGx) and germline genetic testing services across the VA healthcare system. The partnership allowed VA providers to use advanced precision diagnostics to tailor treatment plans for conditions like post-traumatic stress disorder (PTSD) and depression, minimize side
Data Privacy + Security Insider
Latest from Data Privacy + Security Insider - Page 2
ShinyHunters Targets FBI
Ransomware gang ShinyHunters boldly attacked the FBI this week, alleging that it hacked into the FBI’s job site, defaced it, then stole sensitive records of employees and applicants, including human resources records of current employees.
The gang alleges that it exploited a vulnerability in Oracle’s PeopleSoft product that enabled remote code execution allowing them to…
AI Governance Lagging Behind Rapid Employee Adoption of AI Tools
Survey results released in OneTrust’s 2026 AI-Ready Governance Report shows that employees are adopting AI tools more rapidly than company AI governance programs can keep up.
Although organizations indicated they were adopting governance programs to address the use of AI in their organizations, “Some organizations know agents are being used in parts of the business…
AI in the Jury Box: Promise, Limits and the Role of Human Deliberation
Last fall, the University of North Carolina at Chapel Hill School of Law reportedly used ChatGPT, Claude, and Grok as jurors in a mock trial based on a real juvenile case. At the same time, AI-powered jury research platforms are entering the litigation consulting market, offering attorneys and claims professionals rapid assessments of liability, comparative…
Privacy Tip #508 – Manhattan DA Seizes 12 Domains Selling Deep Fakes
Manhattan District Attorney Alvin L. Bragg, Jr., announced on September 14, 2026, the “seizure of 12 domain names of illegal websites used for unlawfully disseminating, publishing, and selling non-consensual celebrity ‘deepfake’ videos.” According to the press release, the individuals under investigation:
[A]llegedly used artificial-intelligence (‘AI’) image and video creation tools to turn pre-existing photos and…
Undetected HR Identity Fraud Compromises Company Networks
Our clients are increasingly experiencing HR identity fraud—when an imposter (sometimes from a foreign adversary nation like North Korea) poses as a candidate for a remote job, often in the information technology space, in order to obtain access to company information or divert funds for a nefarious purpose.
The website Hypr recently issued its “first…
Privacy Tip #507 – Coordinated Vishing Attacks Hit Microsoft Teams Users
A recent article released by the Palo Alto Threat Research Center found that, between January and April 2026, a coordinated effort by threat actors was successful in launching vishing attacks using Microsoft Teams accounts to compromise companies across multiple industries.
The threat actor uses an external Teams account and creates a chat “using identities designed…
18,607 Privacy Requests, 13 Injuries, and No FCRA Class
On August 26, 2026, LexisNexis won an important, but limited, victory in a proposed class action: a federal court refused to certify a class of people seeking damages for the company’s response to privacy requests which violated the Fair Credit Reporting Act (FCRA). The court did not decide whether LexisNexis had violated the FCRA, only…
California SB 690 Could Narrow CIPA Website-Tracking Lawsuits
California Senate Bill 690 is finally moving forward. The original bill would have broadly exempted disclosures made for a “commercial business purpose,” as defined under the California Consumer Privacy Act (CCPA), potentially eliminating many California Invasion of Privacy Act (CIPA) claims involving common website technologies. The amended version is narrower but could still offer meaningful…
ShinyHunters Hits Florida DMV Database
Ransomware group ShinyHunters alleges on its online platform that it has compromised the Florida Department of Motor Vehicles’ Driver and Vehicle Information Database (DAVID) and stole the DMV records of over 200,000 individuals. The threat actor posted a screenshot of Jeffrey Epstein’s DMV record as proof.
The DAVID records of drivers include their name, address,…