January 10th, 2025

One notable incident involves a class action lawsuit against Google, alleging the company collected user data even after users opted out. The case went to trial in August 2025, highlighting the ongoing tension between data collection practices and user privacy expectations. Another high-profile incident involved BayMark Health Services, North America's largest addiction treatment provider, which suffered a data breach in September 2024. The RansomHub ransomware gang claimed responsibility, stealing and leaking personal and health information of an undisclosed number of patients. In response to these and other significant breaches, including an attack on the Treasury Department attributed to a Chinese hacking group, the Biden administration expedited the finalization of a cybersecurity executive order aimed at bolstering U.S. government cybersecurity practices. The order mandates measures such as robust identity authentication and encryption for government communications, improved security protocols for cryptographic keys, and stricter access controls for federal contractors. These events underscore the increasing importance of cybersecurity in an increasingly interconnected world, emphasizing the need for robust security measures and responsible data handling practices by both corporations and government entities.