You filed a complaint with the FCC. You're Deaf. The system governing your data was designed without you in mind. Not maliciously. Just invisibly.

A routine Federal Register notice from the FCC carries implications that stretch well beyond data management — touching on how federal agencies handle the records of disabled Americans who depend on FCC-regulated services.

Cybersecurity firm Hunt.io has reported the discovery of 68 gigabytes of potentially stolen data from a Philippine government agency, which was left publicly accessible due to a security oversight by the thief. The data, consisting of SQL Server backups, was found on an open Python web server that was active on September 7. Hunt.io's automated threat intelligence platform detected the exposed server, which allowed anyone to access the working directory containing the backups. The file names of the backups included references to systems operated by agencies such as the Philippine Overseas Employment Administration (POEA) and the Department of Migrant Workers' Balik-Manggagawa Online Processing System. Hunt.io did not examine the actual data contents but noted that the file names matched known government systems. The National Privacy Commission (NPC) is investigating the incident to determine if there were violations of the Data Privacy Act of 2012. The NPC stated it is coordinating with the Department of Migrant Workers to address data privacy concerns and safeguard the rights of data subjects. Hunt.io advised the public to remain cautious of scams or messages referencing OFW (Overseas Filipino Worker) or employment records, urging them to trust official notices over unsolicited communications. The firm also clarified that the data was not publicly dumped but was discovered due to the thief leaving the server accessible. The exact nature of the stolen data and how the thief accessed the network remain unclear, as Hunt.io did not determine the entry method or where the data was sent. The NPC's investigation aims to assess the facts and circumstances of the incident. The Department of Migrant Workers and the Philippine National Computer Emergency Response Team have been contacted for further information. Hunt.io's blog post detailed the technical aspects of the discovery, emphasizing that the operation ended because the working directory was public rather than due to detection. The firm noted that while the theft was completed, the method of entry and destination of the data are still unknown. This incident highlights the importance of securing sensitive data and the risks associated with leaving servers exposed to the internet.

Federal Register Watch for October 7, 2026. Treasury builds a file on student borrowers, Justice builds a firearms rights database and asks to keep it largely closed, and Labor abandons a rulemaking after fifteen months.

New Zealand Privacy Act 2020: the statute whose privacy principles govern personal data. How it reaches ad tech, what IPP 3A added and why its fines stay low.

New Zealand Privacy Act 2020: the statute whose privacy principles govern personal data. How it reaches ad tech, what IPP 3A added and why its fines stay low.

New Zealand Privacy Act 2020: the statute whose privacy principles govern personal data. How it reaches ad tech, what IPP 3A added and why its fines stay low.

New Zealand Privacy Act 2020: the statute whose privacy principles govern personal data. How it reaches ad tech, what IPP 3A added and why its fines stay low.

A Federal Register notice about a data matching program raises questions beyond administrative procedure. When government systems share disability-related benefit data, equal access is at stake.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

IAB Australia's Data & Privacy 101 with Sarah Kruger covers consent rules, tracking pixels, deidentification, and Privacy Act reforms for digital advertisers.

YouTube video by Democracy Docket

TikTok video by Pythia Rogue One 🌈