Iran-linked hackers wipe devices at medical technology firm Stryker
11 Mar 2026
A pro-Iran group claims a destructive attack on Stryker that wiped tens of thousands of company devices and disrupted operations worldwide.
Insights for North, Central, and South America, and the Caribbean.
A pro-Iran group claims a destructive attack on Stryker that wiped tens of thousands of company devices and disrupted operations worldwide.
US rules on substance use disorder treatment records now align more closely with HIPAA, adding breach notification and civil penalties.
New CCPA regulations on cybersecurity audits, risk assessments and automated decision-making technology come into force in California.
The Texas Responsible AI Governance Act and Illinois’ AI-in-employment law both come into force, adding to US state AI regulation.
Larger US broker-dealers, investment advisers and funds must now have incident response programmes and notify affected customers within 30 days.
The DFARS rule implementing CMMC takes effect, allowing US Department of Defense contracts to require CMMC status as a condition of award.
Security vendor F5 says a nation-state actor had long-term access to its systems and stole BIG-IP source code and vulnerability information.
New US Coast Guard rules require US-flagged vessels and regulated facilities to appoint cybersecurity officers and report cyber incidents.
New York’s Child Data Protection Act now limits how online services collect and process the personal data of users under 18.
The US has criminalised publishing non-consensual intimate imagery, including AI deepfakes, and given platforms one year to set up removal processes.
New US rules restricting access to bulk sensitive personal data by countries of concern take effect, with further obligations from October 2025.
Peru’s new data protection regulation takes effect, adding DPO duties and 48-hour breach notification.