Insights for North, Central, and South America, and the Caribbean.
A security incident forced Ahold Delhaize to shut down systems across its European and US grocery brands, halting Albert Heijn’s online shopping and some of its distribution centres.
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
California’s governor signs 13 AI bills, including human review of AI-driven dismissals, as the first parts of Connecticut’s AI Responsibility and Transparency Act take effect.
Six major AI developers sign a voluntary White House accord promising internal controls, external audits, and board oversight of frontier AI risks.
The US Federal Trade Commission opens an investigation into OpenAI, Anthropic, and the AI evaluator METR over the potential dangers of frontier AI.
CISA confirms attacks on over 100 internet-exposed US water and wastewater systems in July 2026, which US officials believe were likely Iranian.
Registered California data brokers must now retrieve and act on consumer deletion requests submitted through the state’s DROP platform.
Canada’s Critical Cyber Systems Protection Act creates mandatory cyber security programmes and incident reporting for federally regulated critical sectors.
Covered platforms must now remove reported non-consensual intimate imagery, including AI deepfakes, within 48 hours of a valid request.
ShinyHunters claims a breach of Instructure’s Canvas platform, affecting nearly 9,000 schools and universities, then defaces login pages during exams.
Online services directed at US children under 13 must now comply with the amended COPPA Rule, including written security programmes and retention policies.