EY is one of the four largest auditing and "professional services providers," offering tax, consulting, and transaction advisory services to major companies in more than 150 countries. This breach took place over March and April. It's unclear exactly what data was taken or how many people were impacted, but it includes personal & financial data "contained in or used to prepare tax filings." 

This...

The deadline to comment on the FCC’s proposed rule to require government ID, physical address, and alternative phone number for every phone line in the US is July 25. 


You can submit a comment by going to https://www.fcc.gov/ecfs/filings/express, selecting Express Comment at the top of the page, and entering 17-59 and 02-278 as the docket numbers in the first field, like so: 
 [CleanShot 2026-07...

I’m very interested to see how this shakes out in the courts. Hopefully the ACLU or EFF will jump on this.

Flock-style license plate reader vendor Leonardo announced a new system called SignalTrace that can fingerprint your wireless devices while you drive by and track you around without needing to see your license plate. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/27/surveillance-cameras-can-now-be-retrofitted-to-track-your-wireless-devic...

The Treasury Inspector General for Tax Administration (TIGTA) found over 100 vulnerabilities in a third-party contractor the IRS was using to digitize tax documents. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/29/over-100-vulnerabilities-found-in-irs-contractor-handling-americans-tax-information/

They seemed really sketchy, and this community was critical of them Presearch.com, Decentralized Search Engine 
My biggest complaint of them was the extensive amount of ADs. But they tried to build an easy to use decentralized search engine, unlike Yacy. 
Maybe still standing search engines should be more decentralized like Presearch was 
Fun fact: Back in 2023 I had a video call with CMO and VP...

The Pokémon Company announced that they've implemented mandatory facial recognition in Japanese Pokémon stores to combat card scalpers. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/29/pokemon-stores-implementing-facial-recognition-to-combat-scalpers/

Is the privacy issue finally having it’s moment with the public?

In a blog post, Google announced it is working on a system in Chrome to apply updates without needing to restart the browser in order to keep up with a mountain of patches. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/30/new-dynamic-patching-in-chrome-would-allow-updates-without-restarting/

CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/07/31/cisa-releases-guidance-urging-water-treatment-facilities-to-disconnect-equipment-from-the-internet/

In the middle of the night on July 30, $70.2 million worth of Bitcoin were stolen from addresses created by hardware wallet manufacturer Coinkite's Coincard products. A firmware bug weakened the recovery phrases generated by several generations of their devices, allowing an attacker to reconstruct their users' private keys without physical access to the devices. 

This is a companion discussion to...

Its an article being viralled around now. First of all i’m not defending Apple, nor shitting on Apple, I’m indifferent. I’m also not a native English speaker and reading the article theres a few weird, strange things being cited like 

A 16-year employee 

Whats the minimum age to be employed in the us? 

His version of the story begins three years earlier 

He worked at Apple since he was 13? 

...

Unit 42 released new research showing that in Google's synced passkey ecosystem, it's possible for an attacker to take over accounts protected by synced passkeys without user interaction. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/03/multiple-flaws-in-googles-synced-passkey-implementation-allow-attackers-to-take-over-your-accounts/

The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/04/whatsapp-is-testing-age-verification/

Online ads provider Adform was hacked. On July 27, the company began serving ads containing malicious code. The company says in its latest annual report that its serves 1.5 billion ads to people’s devices daily. 
According to security researcher Kevin Beaumont, who first revealed the incident, some of the code that Adform used to load its ads on its customers’ websites was maliciously altered. ...

App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/05/apples-private-relay-leaks-your-real-ip-address-in-safari/

OnTrac is an American delivery company that operates in 35 states, covering roughly 70% of the US population. This breach took place in March. The article referenced notification letters but didn't share how many people or what data was impacted. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/05/data-breach-roundup-july-24-30-2026/

“Hardware-bound attestation is a requirement of this project, not an implementation detail we can simply drop,” a maintainer responded. The project invited alternative architectural proposals and said a dedicated security review and threat model would be published soon.I swear to god the EU always does this  kind bs. Here is GrapheneOS take on this: Verifying your browser… 

I swear to god the ...

Greek cybersecurity researcher Vangelis Stykas revealed at the Black Hat security conference that he discovered evidence that 1,640 companies across 57 countries have been compromised by North Korean hacking operations. 

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/08/06/north-korean-hackers-breached-over-1-600-organizations-worldwide/