Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

Texas Government Data Breach Exposes Millions of Driver's Licenses and Passports

A significant data breach within the Texas government has resulted in the theft of an estimated 3 million driver's licenses and passports. This incident highlights critical vulnerabilities in government data security infrastructure and the severe implications of such compromises. The exposed personal identification documents could be exploited for identity theft, fraud, and other malicious activities. This incident underscores the ongoing challenge of protecting sensitive citizen data from sophisticated cyberattacks.

Today's question

Under the ePrivacy Directive, storing cookies on a user's device requires:

  1. Consent from the website operator's DPO, under the broader European fundamental rights framework
  2. Only a notice in the privacy policy, in accordance with the foundational data protection instruments
  3. Proportionate compliance measures address the applicable regulatory obligations, under the broader European fundamental rights framework
  4. Prior informed consent from the user, except for cookies strictly necessary for the provision of the service explicitly requested

Answer this question on the site

Worth knowing

  1. Major US Carrier Stored Credit Card Information Unencrypted

    A major US carrier reportedly stored customer credit card information in an unencrypted format, a critical security lapse discovered by an employee on their first day. This direct violation of industry best practices for data protection puts millions of customers at severe risk of financial fraud and identity theft. The incident highlights a blatant disregard for fundamental data security principles within a prominent organization.

  2. Google Criticized for Denying Bug Bounty for Unfixed Flaw

    Google acknowledged a security researcher's discovery of a flaw with a 'Nice catch!' yet denied a bug bounty for the vulnerability which remains unfixed. This practice raises concerns about Google's commitment to external security research programs and responsible disclosure. It could discourage researchers from reporting vulnerabilities, potentially leaving users exposed and vital systems insecure.

  3. OpenAI Reportedly Testing ChatGPT for Science Subscription

    A leaked report suggests OpenAI is developing a 'ChatGPT for Science' subscription service, indicating a potential expansion of AI applications into specialized, sensitive domains. This development raises questions about data privacy, intellectual property, and algorithmic bias when AI is utilized for complex scientific research. The implications for data handling and ethical AI deployment in scientific contexts warrant careful consideration and robust governance frameworks.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.