CYBERSECURITY

Cyber-Attack Downs More Than 30 Water Utilities Simultaneously

Over 30 individual Minnesota water and wastewater treatment facilities were simultaneously hit with a cyber-attack from an unknown source on July 26 and 27, 2026. The coordinated attack targeted the utilities’ operational technology systems and caused some affected communities to request that residents minimize water use due to limited stored water. Other communities experienced equipment malfunctions requiring them to implement contingency plans and switch to manual operations. Read more

DATA PRIVACY

Sony TV Privacy Suit Ends, But Connected TV Data Risks Remain

Sony smart TV owners have voluntarily dropped their proposed class action against Samba TV, an analytics company accused of collecting and selling television-viewing information to third-party advertisers in violation of state and federal privacy laws. DellaSalla v. Samba TV, Inc., No. 3:25-cv-03470 (N.D. Cal. 7/23/26).The dismissal came after the federal court had already allowed several claims to proceed, including intrusion upon seclusion, unjust enrichment, and claims under the Federal Wiretap Act and the California Invasion of Privacy Act (CIPA). Read more

Pennsylvania’s New Telemarketing Law Dials In on Texts and Robocalls

On July 20, 2026, Pennsylvania Governor Josh Shapiro signed SB 992, updating and expanding Pennsylvania’s Telemarketer Registration Act of 1996 and strengthening restrictions on unwanted telemarketing communications. The law reflects that telemarketing is no longer limited to live calls and that texts, prerecorded messages, and other automated tools are increasingly reaching consumers and businesses. Read more

ARTIFICIAL INTELLIGENCE

White House Moves Toward Voluntary AI Model Review Framework

The White House is moving closer to a voluntary framework under which AI companies would submit their most advanced models to the federal government before public release. The White House’s Office of the National Cyber Director reportedly circulated the draft framework by to OpenAI, Anthropic, and Google, and those companies jointly submitted edits. Although the review process details are not yet public, the continued federal interest in pre-release review of frontier AI models follows earlier discussion of a possible FINRA-like watchdog for advanced AI systems. Read more

PRIVACY TIP #501

Fitness Trackers Lack Transparency, Privacy + Security Features

A recent Electronic Frontier Foundation (EFF) article reports that companies that make wearable trackers, whether for fitness or health, “are behind the times when it comes to basic privacy practices and transparency” and urges those companies to “improve those practices.”

The article, Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features, states that up to 40% of individuals in the U.S. own a wearable health device. These devices are not subject to health-related privacy protections, such as HIPAA. They can, and do, collect vast amounts of data while being worn, and the companies share that data with third parties or use it to train AI models. When users activate the device, its privacy policy outlines what information it collects, how it is used and disclosed, and who it is shared with. The user is asked to click “I agree” to the privacy policy, and unfortunately, most people don’t read it before they agree. This allows the device to collect, use, and share your data broadly, including with law enforcement.

Your smartwatch may know more about you than your doctor does. Learn what data these devices collect, who they share it with, and how you can better protect your privacy. Read more