Data Privacy Hub Project Team - Orion Policy Institute

OpenAI Codex Authentication Tokens Stolen in Supply Chain Attack

July 1, 2026

Key Takeaways OpenAI Codex authentication tokens were stolen through a supply chain attack. The tool used in the attack was a malicious npm package known

Record of €18M Fine for Amadeus Over GDPR Violations Involving Traveler Data

June 25, 2026

Key Takeaways Spain’s data protection authority (AEPD) imposed a €18 million fine, which was reduced to €14.4 million after voluntary payout, on Amadeus IT Group

California Reached a $12.75 Million CCPA Settlement with General Motors (GM)

June 18, 2026

Key Takeaways California officials attained a proposed $12.75 million settlement with General Motors (GM), the largest CCPA fine ever issued. Officials allege that GM sold

Connecticut Data Privacy Updates and the New Delete-Style Framework

June 10, 2026

Key Takeaways Connecticut enacted updates to its state privacy law (CTDPA), including a one-stop data deletion mechanism modeled after California’s Delete Act. The law creates

Carnival Corporation Data Breach Exposes Millions of Passenger Records

June 8, 2026

Key Takeaways An extortion group named ShinyHunters claims to have stolen 8.7 million personal records from Carnival Corporation. The breach likely originated from a phishing

OpenAI’s Privacy Filter Marks Industry Shift

June 4, 2026

Key Takeaways OpenAI launched a Privacy Filter that identifies and redacts sensitive information before it ever touches the cloud. The Privacy Filter marks a shift

Lawsuit Filed Against Netflix Over Data Privacy

May 26, 2026

Key Takeaways The Texas Attorney General filed a lawsuit against Netflix for collecting and profiting from users’ data without their knowledge or consent. The petition

Canvas Data Breach and Ransom Agreement

May 20, 2026

Key Takeaways Canvas, a popular learning management system, was targeted in a cyberattack by a group called ShinyHunters in late April. The group stole 3.65

The Supreme Court Examines the Constitutionality of Geofence Warrants

May 14, 2026

Key Takeaways The Supreme Court heard oral arguments on the constitutionality of geofence warrants, which require companies to turn over information from devices tracked in

TN Medical Center Breach Exposes Sensitive Patient Data

May 12, 2026

Key Takeaways The Cookeville Regional Medical Center experienced a ransomware attack that exposed the personal, financial, and medical information of more than 337,000

OPI-ROCCA: Records Of Critical Cyber Attacks