Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentA year into mandatory data breach reporting, many organizations are still getting the basics wrong. It s not because the regulations are unclear, GDPR Article 33 and similar frameworks are explicit, b
Breach & Risk AssessmentWhen your mobile banking platform exposes customer data mid-deployment, you face an immediate decision: roll back the update, suspend the service, or monitor and contain. The wrong choice worsens the
Breach & Risk AssessmentYour security team just confirmed unauthorized access to customer data. You don t yet know how many records, which fields, or whether the attacker is still in your environment. The clock on your 72-ho
Breach & Risk AssessmentWhat Changed On June 26, Nissan revealed a critical remote code execution flaw in Oracle PeopleSoft, CVE-2026-35273, had been exploited as a zero-day. This breach exposed Social Security numbers, bank
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentThese questions come from conversations with data governance and privacy teams after Manchester Airports Group disclosed a third-party database breach that exposed about 8.7 million customers details.
Breach & Risk AssessmentScope This guide outlines the technical controls and operational practices needed to prevent credential exposure in client-side JavaScript and secure API endpoints from unauthorized access. It focuses
Breach & Risk AssessmentWhen ShinyHunters demanded approximately $55 million from McKesson Corporation in late August, they exposed more than just stolen data. They highlighted a widespread misunderstanding of third-party ri
Breach & Risk AssessmentThe Conventional Wisdom Ask any healthcare IT security team how they prevent unauthorized data access, and you ll hear the same checklist: role-based access controls, multi-factor authentication, and
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
Breach & Risk AssessmentThe problem / why this matters now Your customer database is secure behind firewalls and encryption, but what about your third-party vendors? They often have access to the same data, and you don t con
Breach & Risk AssessmentWhen a vendor incident exposes your customer data, your notification script determines whether you maintain trust or face a regulatory investigation. This template provides a structured approach for G
Breach & Risk AssessmentThe Question at Hand When Partnered Health s 21 clinics experienced a breach affecting medical records across Sydney, Melbourne, and Canberra, they obtained an interim injunction from the New South Wa
Breach & Risk AssessmentWhen France s tax authority disclosed a breach affecting roughly 600,000 individuals and businesses, it faced a challenging decision: notifying victims while the investigation was still underway. The
Breach & Risk AssessmentThe Conventional Wisdom When a major breach makes the news, privacy officers often look to settlement terms for guidance. The 23andMe case is no exception: an $18 million penalty, mandatory risk analy
Breach & Risk AssessmentThe FTC s complaint against Hims Hers highlights a common issue: companies often combine privacy violations with deceptive billing practices, then express surprise when regulators take action. The com
Breach & Risk AssessmentA UK government agency just handed you a blueprint for what not to do. UK Government Investments left management files and 51 officials contact details exposed for 40 hours because one staff member ig
Breach & Risk AssessmentWhen a database holding the work details of 135,000 police officers and criminal justice professionals gets breached, you re not just looking at a data incident. You re looking at a targeting list for
Breach & Risk AssessmentThe Ceva Logistics breach from July 29 to August 1 wasn t notable for its duration or complexity. What made it significant was the impact: eight warehouses compromised, affecting companies like Valve,
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
Breach & Risk AssessmentThe Challenge SafePal discovered unauthorized access to customer order information, affecting 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed names, em
