Surveillance, Data Breach & EFF Lawsuit – 10/17/2025

This privacy digest highlights the concerning trend of increased surveillance and data breaches. Key stories include the EFF’s lawsuit against the Trump administration’s ideological surveillance program, the exploitation of lax authentication in Zendesk leading to ’email bombs’, and the surprising revelation of unencrypted satellite traffic. Additionally, a data breach at Sotheby’s exposed financial information, and a breach at Prosper impacted over 17 million accounts.

Top 5 Critical Privacy Alerts

• Labor Unions, EFF Sue Trump Administration to Stop Ideological Surveillance of Free Speech Online: Lawsuit challenges the U.S. government’s online surveillance program targeting noncitizens. Read more
• Email Bombs Exploit Lax Authentication in Zendesk: Cybercriminals are flooding inboxes using Zendesk’s lax authentication to send menacing messages. Read more
• A Surprising Amount of Satellite Traffic Is Unencrypted: Study reveals sensitive data including critical infrastructure and personal communications are broadcast unencrypted. Read more
• Auction giant Sotheby’s says data breach exposed financial information: Sotheby’s is notifying individuals of a data breach where threat actors stole sensitive financial details. Read more
• Have I Been Pwned: Prosper data breach impacts 17.6 million accounts: Hackers stole personal information of over 17.6 million people after breaching Prosper’s systems. Read more

Privacy Laws & Regulations

• Recapping CMMC Level 3: Considerations for Government Contractors: DoD issued a final rule implementing the Cybersecurity Maturity Model Certification (CMMC) program for government contractors. Read more
• Leveling Up: Will CMMC Contract Obligations Impact Your Organization?: New rule impacts how defense contractors engage with the Department of Defense regarding Cybersecurity Maturity Model Certification. Read more

Data Minimization & User Consent

• Opt Out October: Daily Tips to Protect Your Privacy and Security: Series of daily tips to help users take control of their online privacy and limit tech giant surveillance. Read more

Surveillance

• Claro and Town of Dover, NJ Launch AI Video Analytics to Transform Public Safety: Dover, NJ partners with Claro to deploy AI-driven surveillance tech across municipal buildings. Read more
• Labor Unions, EFF Sue Trump Administration to Stop Ideological Surveillance of Free Speech Online: Lawsuit challenges the U.S. government’s online surveillance program targeting noncitizens. Read more