Data Breaches, Apple Backdoor & Android Spyware – 10/02/2025

Today’s privacy digest reveals significant data breaches, including a major incident at WestJet affecting 1.2 million customers and a ransomware attack on Motility Software impacting 766,000 clients. The UK government’s renewed push for an Apple backdoor raises encryption concerns, while new Android spyware campaigns highlight ongoing mobile security threats. Stay informed to protect your data and privacy.

Top 5 Critical Privacy Alerts

• WestJet Data Breach Exposes Travel Details of 1.2 Million Customers: Canadian airline WestJet reports a cyberattack compromised personal information, including passports and ID documents, of 1.2 million customers. Read more
• Data Breach at Dealership Software Provider Impacts 766k Clients: A ransomware attack at Motility Software Solutions exposed the sensitive data of 766,000 customers. Read more
• Red Hat Confirms Security Incident After Hackers Claim GitHub Breach: The Crimson Collective claims to have breached Red Hat’s private GitHub repositories, stealing nearly 570GB of data. Read more
• UK Government Demands Apple Backdoor for British Users’ Data: The UK government is again demanding Apple create a backdoor into its encrypted backup services, now limited to British users. Read more
• Android Spyware Campaigns Impersonate Signal and ToTok Messengers: New spyware campaigns, ProSpy and ToSpy, target Android users with fake upgrades for Signal and ToTok to steal data. Read more

Privacy Laws & Regulations

• Navigating California’s New and Emerging AI Employment Regulations: New regulations in California impose requirements on employers using automated-decision systems in employment decisions. Read more

Regulatory Fines & Enforcement Actions

• Who’s Eligible for a Refund from Amazon?: Amazon agreed to pay $2.5 billion to settle FTC charges of enrolling millions in Prime subscriptions without consent. Read more

Cybersecurity

• CISA 2015 Sunsets: Cyber Threat Sharing Without a Net?: The Cybersecurity Information Sharing Act of 2015 expired, removing the legal framework for cyber threat information sharing. Read more
• China Issues Measures for the Administration of National Cybersecurity Incident Reporting: China issued measures for national cybersecurity incident reporting, effective November 1, 2025. Read more

Data Breaches & Leaks

• WestJet Data Breach Exposes Travel Details of 1.2 Million Customers: Canadian airline WestJet reports a cyberattack compromised personal information, including passports and ID documents, of 1.2 million customers. Read more
• Data Breach at Dealership Software Provider Impacts 766k Clients: A ransomware attack at Motility Software Solutions exposed the sensitive data of 766,000 customers. [Read more](https://www.bleepingcomputer.com/news/security/data-breach-at-dealership-software-provider-im pacts-766k-clients/)
• Red Hat Confirms Security Incident After Hackers Claim GitHub Breach: The Crimson Collective claims to have breached Red Hat’s private GitHub repositories, stealing nearly 570GB of data. Read more
• Adobe Analytics Bug Leaked Customer Tracking Data to Other Tenants: Adobe warns Analytics customers of an ingestion bug that caused data from some organizations to appear in others’ instances. Read more