What changed, and what to do.https://makeprivacy.org/news/feed.xml2026-10-14T00:00:00Zmakeprivacy.orghttps://makeprivacy.org/news/#2026-10-14-crunchbase-leak-puts-560-000-business-contacts-details-onlin2026-10-14T00:00:00Z2026-10-14T00:00:00Z

Data said to have been taken from Crunchbase in January 2026 has been published, and Have I Been Pwned has now added it. It covers about 560,000 email addresses, mostly sales leads and business contacts, with names, phone numbers, employers, job titles and postal addresses. No passwords. What to do: Check your work addresses on Have I Been Pwned, and expect more convincing phishing at any address that appears.

<article class="note" id="2026-10-14-crunchbase-leak-puts-560-000-business-contacts-details-onlin"><p class="meta">14 October 2026 · Have I Been Pwned</p><h2>Crunchbase leak puts 560,000 business contacts&#x27; details online</h2><p>Data said to have been taken from Crunchbase in January 2026 has been published, and Have I Been Pwned has now added it. It covers about 560,000 email addresses, mostly sales leads and business contacts, with names, phone numbers, employers, job titles and postal addresses. No passwords.</p><p><strong>What to do:</strong> Check your work addresses on Have I Been Pwned, and expect more convincing phishing at any address that appears.</p><p class="links"><a href="https://haveibeenpwned.com/Breach/Crunchbase" rel="noopener">Read it at Have I Been Pwned</a> · Our guide: <a href="/guides/one-email-address-per-account/">One email address for every account</a></p></article>https://makeprivacy.org/news/#2026-10-12-sharecare-leak-exposes-318-000-email-addresses-and-sales-con2026-10-12T00:00:00Z2026-10-12T00:00:00Z

After an extortion campaign against the digital health company Sharecare in August 2026, the attackers published about 318,000 email addresses. Most are business sales and marketing records; a small number of Brazilian health insurance members' records include their CPF (taxpayer) numbers. No passwords. What to do: Check your work addresses on Have I Been Pwned, and treat unexpected mail that knows your name, employer and job title with extra care.

<article class="note" id="2026-10-12-sharecare-leak-exposes-318-000-email-addresses-and-sales-con"><p class="meta">12 October 2026 · Have I Been Pwned</p><h2>Sharecare leak exposes 318,000 email addresses and sales contacts</h2><p>After an extortion campaign against the digital health company Sharecare in August 2026, the attackers published about 318,000 email addresses. Most are business sales and marketing records; a small number of Brazilian health insurance members&#x27; records include their CPF (taxpayer) numbers. No passwords.</p><p><strong>What to do:</strong> Check your work addresses on Have I Been Pwned, and treat unexpected mail that knows your name, employer and job title with extra care.</p><p class="links"><a href="https://haveibeenpwned.com/Breach/Sharecare" rel="noopener">Read it at Have I Been Pwned</a> · Our guide: <a href="/guides/one-email-address-per-account/">One email address for every account</a></p></article>https://makeprivacy.org/news/#2026-10-12-norway-fines-microsoft-s-xandr-8-5-million-euros-over-grindr2026-10-12T00:00:00Z2026-10-12T00:00:00Z

The Norwegian data protection authority fined the advertising company Xandr, now part of Microsoft, for handling personal data from the dating app Grindr, including details of sexual orientation, without a valid legal basis. The case began with complaints in 2020. What to do: Nothing to do unless you use ad-funded apps that share sensitive details; check what each one lets advertisers see.

<article class="note" id="2026-10-12-norway-fines-microsoft-s-xandr-8-5-million-euros-over-grindr"><p class="meta">12 October 2026 · noyb</p><h2>Norway fines Microsoft&#x27;s Xandr 8.5 million euros over Grindr data</h2><p>The Norwegian data protection authority fined the advertising company Xandr, now part of Microsoft, for handling personal data from the dating app Grindr, including details of sexual orientation, without a valid legal basis. The case began with complaints in 2020.</p><p><strong>What to do:</strong> Nothing to do unless you use ad-funded apps that share sensitive details; check what each one lets advertisers see.</p><p class="links"><a href="https://noyb.eu/en/privacy-win-norwegian-authority-fines-microsofts-xandr-eu-85-million" rel="noopener">Read it at noyb</a></p></article>