Privacy Roundup #0138 • January 2018
January 2018 opened with the Meltdown and Spectre chip flaws and closed with the Strava heatmap exposing military bases, a month when hardware, fitness apps and national databases all leaked at once.
Privacy in the digital world covers how personal data is collected, stored, and used. Posts in this category discuss ways to protect your information online, privacy tools, and related concerns. As more of life moves online, understanding privacy becomes more important.
January 2018 opened with the Meltdown and Spectre chip flaws and closed with the Strava heatmap exposing military bases, a month when hardware, fitness apps and national databases all leaked at once.
December 2017 closed the year with the FCC scrapping net neutrality, fresh leaks of bank and household data, and cryptocurrency miners turning ordinary devices into stealthy money machines.
November 2017 was defined by Uber's concealed mega-breach, a wave of leaky cloud buckets spilling military and corporate secrets, and fresh fights over location tracking, encryption and surveillance law.
October 2017 was dominated by historic breach revelations, broken cryptography and the first reckoning over surveillance and Russian influence operations.
September 2017 was dominated by the Equifax catastrophe, a cascade of cloud misconfigurations and supply chain attacks, and fresh fights over surveillance at the border and online.
August 2017 paired landmark wins for privacy as a right with a steady drumbeat of breaches, leaks and state surveillance overreach.
July 2017 was dominated by misconfigured cloud servers spilling millions of customer records, while governments pushed harder against encryption and anonymity tools.
June 2017 turned data exposure into a global spectacle, as leaked voter files, spilled customer records, fresh CIA hacking tools and a wave of surveillance laws collided with a few hard-won wins for privacy.
Leaked NSA exploits powered the WannaCry worm while breaches, phishing campaigns and a record fine made May 2017 a brutal month for data protection.
April 2017 was dominated by the repeal of America's broadband privacy rules, fresh leaks of government hacking tools and a steady drip of breaches and surveillance disclosures.
March 2017 was dominated by the WikiLeaks Vault 7 disclosures and a Congressional vote to scrap broadband privacy rules, alongside a run of leaky databases and connected devices that spilled personal data.
February 2017 paired sloppy corporate data leaks with a hardening of government surveillance at the border and in the courts.
January 2017 opened the Trump era with an order stripping privacy protections from non-citizens, while ransom crews wiped exposed databases and surveillance vendors learned they could be hacked too.
December 2016 closed the year with record breaches, a landmark European ruling against mass data retention and fresh state-sponsored hacking that pushed surveillance and security to the centre of the privacy debate.
November 2016 hardened state surveillance into law while breaches, botnets and ransomware showed how fragile everyday data really was.
October 2016 was dominated by mass surveillance disclosures, record breaking botnet attacks on the open internet and a wave of breaches and rulings that tested how far governments and companies could reach into private data.
September 2016 was dominated by record breaches and record attacks, as Yahoo admitted to history's largest hack while a botnet of insecure cameras drove the biggest assaults the internet had then seen.
August 2016 was dominated by the Shadow Brokers dumping NSA hacking tools, a wave of point of sale and forum breaches, and fresh worries about state surveillance from Pegasus spyware to hacked voter rolls.
July 2016 set transatlantic data rules and warrant limits against a steady run of breaches, encrypted messaging launches and surveillance disputes.
June 2016 was the month the credential reuse wave broke, as old mega breaches at LinkedIn, MySpace and VK fed account takeovers across the web while state hacking and corporate data deals raised the privacy stakes.
May 2016 was the month of the historical mega breach, as hundreds of millions of old LinkedIn, MySpace, Tumblr and Fling credentials surfaced for sale, while Europe locked in the GDPR and lawmakers fought over encryption.
April 2016 was the month encryption went mainstream and lawmakers pushed back, as WhatsApp and Viber locked down a billion chats, Europe adopted the GDPR, and giant leaks from Panama to the Philippines laid bare how poorly personal data was guarded.
March 2016 was dominated by the Apple versus FBI encryption fight, a wave of payroll phishing and healthcare breaches, and fresh moves by regulators and courts to rein in surveillance.
February 2016 was dominated by the Apple and FBI fight over unlocking a San Bernardino iPhone, while ransomware, fresh breaches and surveillance rulings kept the pressure on everyone else.
January 2016 reopened the crypto wars and exposed fragile firewalls, with NSA-tainted backdoors, point-of-sale breaches and a landmark European surveillance ruling all landing in one month.