PrivacyHawk

The Personal Data Management App that lets you opt-out, unsubscribe and delete your private data from companies, all in one app. Available for iOS and Android📲

[PrivacyHawk @Privacy_Hawk]

Your info’s out there but it’s not too late to take back control.

[PrivacyHawk @Privacy_Hawk]

If your information appears on FastPeopleSearch, you can request removal.

Here’s how to opt out (free):
1 - Go to https://t.co/bJTZ8dDp6m
2 - Search for your record
3 - Find the matching listing and click “Remove My Record”
4 - Enter your email address
5 - Complete the verification email
6 - Submit the removal request

Note: your information may remain visible on other people-search sites even after removal from FastPeopleSearch.

You’re often added automatically through public records and data brokers, then given the option to opt out later instead of being asked first.

[PrivacyHawk @Privacy_Hawk]

Scammers are getting noisier, not smarter. They blast millions of calls using auto-dialers and constantly rotate phone numbers, so blocking one rarely stops the next. Blocking and reporting still helps, but another piece of the puzzle is reducing how widely your phone number is exposed in the first place. Data broker sites fuel a lot of these spam campaigns, and services like PrivacyHawk help remove your information from those databases, making it harder for scammers to keep adding your number to new calling lists.

[PrivacyHawk @Privacy_Hawk]

That scale makes the breach much more concerning. Nearly 9.8 million leaked email addresses, millions of physical addresses, names, phone numbers, and thousands of dates of birth give scammers plenty of material to build convincing phishing campaigns. Combined with internal customer relationship data, attackers can craft messages that appear highly legitimate, making it especially important for affected individuals to be cautious of emails, texts, or calls claiming to be from Madison Square Garden, the Knicks, or affiliated ticketing services.

[PrivacyHawk @Privacy_Hawk]

The breach is a reminder that organizations often store much more than basic contact information. Beyond names and email addresses, internal customer relationship data and behavioral notes can also become exposed, giving scammers additional context to craft convincing phishing and impersonation attacks. If you attended events or held an account with Madison Square Garden Entertainment, it's a good time to be extra cautious of unsolicited emails, texts, or calls referencing tickets, refunds, loyalty programs, or upcoming events.

[PrivacyHawk @Privacy_Hawk]

Government platforms supporting licensing and regulatory functions are attractive targets because they often contain operational records, applicant information, and administrative data with long-term intelligence value. If authentic, unauthorized access to a mining registration system could expose regulatory workflows, licensing records, and user information that may be leveraged for fraud, impersonation, or further attacks against government agencies and organizations in the mining sector. Even without confirmation of the dataset's contents, claims involving authenticated access to government portals warrant close scrutiny due to the potential operational and economic impact.

[PrivacyHawk @Privacy_Hawk]

Resume databases are particularly sensitive because they often contain far more personal information than a typical contact list. If authentic, the reported exposure of resumes, contact details, desired job positions, and profile metadata could enable highly convincing recruitment scams, identity theft, phishing, and social-engineering campaigns. Original resume files frequently include employment history, education, certifications, and other personal details, giving threat actors rich context to impersonate recruiters or craft targeted fraud against job seekers.

[PrivacyHawk @Privacy_Hawk]

Financial-services datasets remain especially valuable because they can be used to target individuals with both identity-based and investment-related fraud. If authentic, the reported exposure of names, addresses, phone numbers, email addresses, and dates of birth could enable highly convincing phishing campaigns, account takeover attempts, identity theft, and scams impersonating Hargreaves Lansdown or other financial institutions. The actor's claim that the dataset represents roughly half of the platform's users, if verified, would make it a significant alleged exposure within the UK financial sector.

[PrivacyHawk @Privacy_Hawk]

Biometric datasets are among the most sensitive types of personal information because, unlike passwords or payment cards, facial characteristics cannot simply be replaced. If authentic, the reported combination of facial images with national ID numbers, names, dates of birth, and other identity metadata could significantly increase the risk of identity fraud, synthetic identity creation, document forgery, and attempts to bypass facial recognition or identity verification systems. The long-term impact of biometric exposures is particularly concerning, as compromised biometric data may remain valuable to threat actors for years.

[PrivacyHawk @Privacy_Hawk]

Travel and accommodation platforms are particularly attractive targets because they combine identity information with booking behavior, location history, and account data. If authentic, the reported exposure of password hashes, booking histories, loyalty balances, device fingerprints, and employee access information could enable account takeover attempts, travel-themed phishing, loyalty fraud, and highly targeted social-engineering campaigns. The inclusion of both customer and staff records also raises the potential for broader attacks against the platform's internal operations and partner ecosystem.

[PrivacyHawk @Privacy_Hawk]

Hackers claim they leaked 26 million Madison Square Garden visitor records after an alleged ransom deadline passed.

The leak allegedly includes visitor information, security reports, and records tied to facial recognition systems used by the venue.

A night out at a concert isn't something most people associate with privacy risks. Yet as more venues adopt technologies like facial recognition, visitor data becomes part of the cybersecurity equation, making attendees more likely to be affected when breaches like this occur.

[PrivacyHawk @Privacy_Hawk]

Listings for alleged Windows privilege-escalation 0-days routinely attract attention because SYSTEM-level access can turn a limited compromise into full control of a device or server. However, the combination of a newly advertised exploit, a high asking price, and limited public proof should be treated cautiously until independent researchers or trusted buyers validate the claims. Even so, the continued appearance of six-figure Windows exploit listings highlights the strong demand for privilege-escalation capabilities, particularly those that can bypass modern security controls and be chained with phishing, malware, or initial-access operations.

[PrivacyHawk @Privacy_Hawk]

Sports and entertainment organizations increasingly hold large volumes of customer and business-partner data that extend far beyond ticket sales. In this case, the publication of nearly 10 million email addresses alongside staff and customer relationship information highlights how extortion campaigns are often focused on data theft rather than operational disruption. Even when a large percentage of records have appeared in previous breaches, newly consolidated datasets can still fuel phishing, account takeover attempts, business email compromise, and highly targeted social-engineering campaigns against both employees and fans.

[PrivacyHawk @Privacy_Hawk]

A key Apple and Tesla supplier has confirmed a data breach after hackers allegedly stole more than 630GB of internal data.

According to reports, the exposed files may include Apple supplier specifications, Tesla manufacturing documents, internal emails, and SAP-related information. Apple is reportedly investigating the incident, and a ransom demand was made to Tata Electronics, the affected supplier.

Based on what's been reported so far, the exposed data appears to be company and operational information rather than customer account data. That means Apple and Tesla users aren't believed to be directly affected, though the incident highlights how much sensitive information can sit with third-party suppliers behind the scenes.

[PrivacyHawk @Privacy_Hawk]

CRM activity logs are often overlooked compared to customer databases, but they can reveal a surprising amount of operational intelligence. If authentic, a dataset containing millions of CRM log records could expose employee actions, sales workflows, lead-management processes, customer interaction patterns, internal identifiers, and platform usage details. Even without extensive customer PII, this type of metadata can be valuable for reconnaissance, social-engineering campaigns, fraud, and mapping how dealerships and sales teams operate across the platform.

[PrivacyHawk @Privacy_Hawk]

Telemedicine platforms occupy a particularly sensitive position because they combine healthcare records with digital identity, communications, and patient-access systems. If authentic, an exposure affecting 3.1 million patient records could create risks far beyond standard identity theft, including medical fraud, targeted phishing, insurance abuse, and long-term privacy concerns tied to health information that cannot easily be changed or replaced. The fact that the data is reportedly being used in an extortion campaign also highlights a growing trend in healthcare attacks, where the threat of public disclosure is often leveraged alongside the theft of sensitive patient information.

[PrivacyHawk @Privacy_Hawk]

What makes this alleged breach notable is the diversity of the data reportedly involved. If authentic, the combination of HR records, financial data, customer and vendor information, QuickBooks systems, project documentation, technical drawings, and corporate email archives could provide threat actors with deep visibility into business operations, ongoing projects, supplier relationships, and financial workflows. For construction and distribution companies, exposures of this nature can create risks that extend beyond privacy concerns, including invoice fraud, business email compromise, supply-chain attacks, competitive intelligence gathering, and disruption of active construction projects.

[PrivacyHawk @Privacy_Hawk]

The breadth of sectors represented here is notable. If the claims are authentic, the alleged exposure of healthcare records, student information, insurance-sector data, HR files, financial documents, internal communications, and Salesforce environments could create significant downstream risks ranging from identity theft and fraud to business email compromise and supply-chain attacks. The inclusion of organizations like Sysco, One Medical, NAIC, and multiple educational institutions also highlights a continuing trend in ransomware operations: targeting data-rich organizations where the value of stolen information may rival or exceed the value of operational disruption itself.

[PrivacyHawk @Privacy_Hawk]

Collaboration-platform datasets are especially valuable because they can provide insight into both individuals and organizations. If authentic, the reported exposure of emails, password hashes, login metadata, IP addresses, workspace details, and geographic information could enable credential-stuffing attacks, account takeovers, phishing campaigns, and corporate reconnaissance. The inclusion of workspace metadata is particularly noteworthy, as it may help threat actors map organizational structures, identify high-value targets, and tailor social-engineering attacks against teams that rely on Notion for documentation and internal knowledge management.

[PrivacyHawk @Privacy_Hawk]

What makes this alleged leak particularly concerning is the combination of identity, financial, and contact information in a single dataset. If authentic, the reported inclusion of names, dates of birth, addresses, phone numbers, emails, codice fiscale identifiers, identity-document fields, IBAN details, and IP addresses could enable identity theft, banking fraud, account recovery abuse, and highly targeted phishing campaigns. Datasets that combine financial identifiers with verified contact information are especially valuable to threat actors because they can be used to build convincing social-engineering attacks against both individuals and businesses.

[PrivacyHawk @Privacy_Hawk]

Large corporate data archives can be especially valuable to threat actors because they often contain a mix of operational documents, customer information, internal communications, contracts, financial records, and technical assets. If authentic, an 800 GB dataset linked to Plexsupply could provide extensive visibility into business operations, supplier relationships, procurement activities, and internal workflows, creating opportunities for business email compromise, invoice fraud, supply-chain attacks, corporate espionage, and highly targeted social-engineering campaigns. The sheer size of the claimed archive suggests the exposure may extend well beyond a traditional customer database and could include years of accumulated corporate data.