Latest cybersecurity reporting from selected sources.

'Success Stories' Social Media Program Impermissibly Disclosed PHI of 150 PatientsA "Success Stories" marketing campaign by a Delaware nursing home that involved posting photos and names of patients on social media resulted in a $182,000 federal fine. Regulators say the company violated HIPAA rules through the unauthorized disclosure of patients' protected health information.

How IT Leaders Can Navigate Regulatory Complexity, Use Tech for Digital SovereigntyFrom Schrems II to TikTok fines, data sovereignty is redefining the rules of digital engagement. It is no longer an option for enterprises. CIOs must navigate a maze of data laws and tech strategies to stay compliant and competitive in a world without digital borders.

Irish DPC Imposes a Fine for GDPR ViolationsTikTok must pay 530 million euros to the Irish data regulator for non-compliance with European privacy law. The nearly $600 million fine stems from TikTok's storage of European user data on servers in China and failure to disclose data transfers to China from July 2020 through November 2022.

European Commission Also Fines Apple 500 Million EurosEuropean regulators said Facebook conducted an end run around privacy regulations by requiring users to pay a monthly subscription fee or else accept that their personal data would be fed to advertisers. The European Commission fined the social media giant 200 million euros.

eSafety Regulator Seeks Platform's Policy on Extremist and Child Sexual ContentAustralia regulators on Monday fined social networking company Telegram nearly AU$1 million for delaying its response to questions on how the company regulates violent, extremist and child sexual content on its platform. Telegram was the only social media firm to miss a May 6 deadline.

Social Platforms Also Could Face Stiff Fines for Failing to Protect UsersThe Australian government passed the Scams Prevention Framework law in Parliament to make social media companies, banks and telecommunication companies accountable for scammers using their networks, subjecting them to a maximum of AU$50 million in fines for violations.

Also: Interpol Says 'Pig Butchering' Shames Victims, A Data Leak Scandal in MexicoThis week, U.S. asks Israel to extradite an alleged LockBit coder, don't say "pig butchering," and an Apache Struts flaw. A hunt for alleged data thieves in Mexico, Europe probes TikTok and Netfilix fined 4.75 million. A ransomware attack against Texas medical centers and a credit union breach.

Meta Vows to AppealThe Irish data regulator fined social media platform Meta 251 million euros over a 2018 hack that exposed sensitive data of millions of European Facebook users, including that of children. The bug was in Facebook's "View As" feature permitting a user to see their own profile as it appears to others.

Competition Regulator Says WhatsApp Users Could Not Opt Out of Data SharingIndia's Competition Commission has fined social media conglomerate Meta over $25 million for forcing WhatsApp users to agree to a sweeping data sharing policy with other Meta platforms. The agency ordered the company to stop using users' data for online advertising on other Meta platforms.

The Irish DPC Imposed the Fine for GDPR ViolationsThe Irish Data Protection Commission imposed a 310 million euro fine on LinkedIn for violating a European privacy law stemming from the company's use of customer data. It ordered the social media platform to bring its data processing under compliance.

Fine Is For 2019 Disclosure That Meta Stored User Passwords In PlaintextThe Irish data regulator fined social media giant Meta 91 million euros after an investigation found the company insecurely stored passwords of millions of European Facebook and Instagram users. A Meta spokesperson said the company identified the problem in 2019 and took "immediate action."