Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

Texas Government Data Breach Exposes Millions of Driver's Licenses and Passports

A significant data breach within the Texas government has resulted in the theft of an estimated 3 million driver's licenses and passports. This incident highlights critical vulnerabilities in government data security infrastructure and the severe implications of such compromises. The exposed personal identification documents could be exploited for identity theft, fraud, and other malicious activities. This incident underscores the ongoing challenge of protecting sensitive citizen data from sophisticated cyberattacks.

Today's question

GDPR does NOT apply under Article 2(2) to processing:

  1. Processing of sensitive data is excluded from scope
  2. Processing falling outside Union law scope such as national security
  3. Processing of employee data is excluded from GDPR scope
  4. Processing by small businesses is excluded from the scope

Answer this question on the site

Worth knowing

  1. Major US Carrier Stored Credit Card Information Unencrypted

    A major US carrier reportedly stored customer credit card information in an unencrypted format, a critical security lapse discovered by an employee on their first day. This direct violation of industry best practices for data protection puts millions of customers at severe risk of financial fraud and identity theft. The incident highlights a blatant disregard for fundamental data security principles within a prominent organization.

  2. Google Criticized for Denying Bug Bounty for Unfixed Flaw

    Google acknowledged a security researcher's discovery of a flaw with a 'Nice catch!' yet denied a bug bounty for the vulnerability which remains unfixed. This practice raises concerns about Google's commitment to external security research programs and responsible disclosure. It could discourage researchers from reporting vulnerabilities, potentially leaving users exposed and vital systems insecure.

  3. OpenAI Reportedly Testing ChatGPT for Science Subscription

    A leaked report suggests OpenAI is developing a 'ChatGPT for Science' subscription service, indicating a potential expansion of AI applications into specialized, sensitive domains. This development raises questions about data privacy, intellectual property, and algorithmic bias when AI is utilized for complex scientific research. The implications for data handling and ethical AI deployment in scientific contexts warrant careful consideration and robust governance frameworks.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.