What the data broker industry is doing with your personal information — new privacy laws, enforcement actions, breaches, and plain-language explainers, as well as online privacy tips.
If you got a letter from the Defense Manpower Data Center last month, your Social Security number was sitting in an unencrypted file that outsiders could get to for the better part of a year. DMDC is the Pentagon office that keeps military personnel records and the data behind every Common Access Card.
The DentaQuest data breach is the largest health data breach reported to the federal government so far in 2026, and it was not a ransomware attack in the sense most people picture. Nothing was encrypted and no systems went down.
The Conduent data breach is the third-largest healthcare data breach ever posted to the federal government's breach portal, and it got there in stages. Attackers linked to the SafePay ransomware group were inside Conduent's network for 84 days before anyone noticed.
Of all the identity theft statistics 2026 has produced, the one worth remembering is 229: the number of separate exposure records SpyCloud found circulating on criminal markets for the average breached consumer.