🇩🇰 A Whole Country's Data Leaked & Your Car Is Snitching on You 🚗

Today's headlines are a reminder that your personal data travels farther than you think, whether it's sitting in a government database or streaming out of the car in your driveway. Here are the two stories you need to know.

One Stolen Login, 8.8 Million People Exposed

Attackers broke into Denmark's Central Population Register and walked off with names, addresses, and national ID (CPR) numbers for about 8.8 million people, which is more than the country's entire current population because the register also holds records on former residents. The scary part: they reportedly didn't need a fancy hack. They used a Danish company's legitimate login credentials. A CPR number is used for everything from banking to healthcare in Denmark, so this is a goldmine for identity theft and convincing scams. The lesson for every business is simple: a single compromised password with too much access can turn into a national-scale breach. Multi-factor authentication, tight access controls, and monitoring for unusual logins aren't optional anymore.

Read more

Your Car Is a Smartphone on Wheels, and It's Talking to Advertisers

Researchers at Northeastern University and Consumer Reports tested 21 vehicles and 30 companion apps and found that 19 of the cars contacted at least one third party, including advertising and tracking companies. Seven apps sent personal details like your car's VIN, email, phone number, or precise location to trackers, and GM's apps alone shared VINs with ten companies, including Meta and Google. Pairing your phone's car app roughly doubled how much tracking a vehicle was exposed to. When the researchers contacted manufacturers, most pushed responsibility back onto drivers (Honda was a notable exception and cleaned up its practices). If you drive a connected car, it's worth reviewing the app's privacy settings and asking whether you really need it paired at all.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.