Privacy & Policy
Will Canadian users lose access to Signal and Psiphon over new laws?
Privacy firms warn they will exit Canada if surveillance legislation mandates backdoors and increased data retention for encrypted services.

The Breach Observer Leak Watch Desk is the part of the Breach Observer newsroom that covers data breaches, leaks, privacy and regulators. It is a newsroom desk, not a single person. Sections: Data Breaches, Privacy & Policy. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 12 articles so far. See the editorial policy or report an error.
Privacy firms warn they will exit Canada if surveillance legislation mandates backdoors and increased data retention for encrypted services.

Citizen Lab researchers reveal how Discover-Tech used legitimate ad channels to silently infect devices and profile users without clicks.

Privacy concerns over automatic license plate readers have triggered congressional scrutiny and mass contract cancellations by local governments.

CopilotKit releases CLiF to capture user actions and agent traces together, helping teams build better evaluation datasets for complex tasks.

Kremlin restrictions on VPNs and communications since mid-2025 raise surveillance and operational risks for organizations and individuals in Russia.

Flock founder Garrett Langley argues that society must accept privacy trade-offs to reduce crime and insists that technological progress should not be paused.

Meta notifies roughly 1,500 people, mostly US staff, that hackers accessed code and personal data via stolen credentials.

The privacy watchdog reports billions in fines and launches its first collective redress action against an Austrian credit agency.

Leaked documents reveal how the ransomware group divides labour between callers and keyboard operators to bypass victim defences.

New regulations requiring identity proofs may exclude adults lacking passports or licenses from essential digital services globally.

Security Affairs reports that the Silent Ransom Group extracted $207m from 27 law firms in six months using phone calls and social engineering rather than file encryption.

Director Kash Patel confirms the detention of a second suspected member of the extortion group responsible for compromising agency systems.
