I have very fond memories of using a Eurail pass back in the day while backpacking through Europe as a student. I was saddened to see that Eurail was the victim of a data breach in December 2025 when attackers obtained access to travelers’ full names and contact information, including email addresses, passport details, ID
europe
Extraterritorial Scope of the EU AI Act
By Daniel Lass on
Posted in Artificial Intelligence
Given its extraterritorial reach, companies outside Europe should start preparing for the EU AI Act now. In general, the Act will apply to companies that develop high-risk AI systems used in the EU and that provide outputs from those systems, even if the companies have no physical presence in Europe.
Ahead of August 2026, companies…
Threat Actors Targeting Messaging Applications
By Linn Foster Freedman on
Posted in Cybersecurity
On November 24, 2025, the Cybersecurity & Infrastructure Security Agency (CISA) issued an alert titled “Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications,” which outlines how “multiple cyber threat actors” are “leveraging commercial spyware to target users of mobile messaging applications.”
The threat actors “use sophisticated targeting and social engineering techniques to…
Facebook Acknowledges Breach of Sensitive Data for Nearly 30 Million Users
By William Daley on
As we previously noted, Facebook originally announced a breach late last month, in which hackers took advantage of a code vulnerability in the website’s “View As” feature, to access user’s data. However, on October 12, 2018, Facebook stepped back the number of affected accounts from 50 to roughly 30 million, and it acknowledged that hackers were able to view varying levels of information for different accounts.
Continue Reading Facebook Acknowledges Breach of Sensitive Data for Nearly 30 Million Users
Data Breach at Italy’s No. 1 Bank Exposes 400,000 Accounts
By Norman Roos & Scott Baird on
Posted in Data Breach
Italy’s top bank, UniCredit SpA, is yet another victim in a series of cyberattacks exploiting vulnerabilities in the financial services industry. Criminals made off with biographical and loan data from 400,000 UniCredit loan accounts after gaining access to the bank’s computer system through one of UniCredit’s third-party commercial partners. The series of data breaches was…
Repeal of FCC Privacy Rules Sparks Concern in U.S. and Europe
By Kelly Frye Barnett on
The Federal Communications Commission (FCC) privacy rules required providers such as Comcast Corp. and AT&T Inc. to get subscribers’ permission before collecting and sharing their personal data. On April 4, 2017, President Donald Trump signed a congressional resolution rescinding those rules and sparking major concern both in the U.S. and Europe.
Indeed, according to a…