9,300+ AWS access keys. Still active. Researchers found more than 9,300 AWS keys that had been leaked and are still valid, including hundreds linked to company accounts with enough access to potentially take full control. Some had been sitting in public repositories for around five years. One leaked key can be all it takes. Cloud makes everything convenient. It also means one forgotten credential can become a very big problem. Centralise enough of your infrastructure, and eventually one key can open the door to everything.

Two NHS patient-data companies, Arcturis Data and Akrivia Health, have agreed a £140m merger. The combined company will have access to data from 40 NHS trusts, covering more than 20 million patients currently in treatment and 100 million aggregated patient records. It also already has relationships with major pharmaceutical companies including AstraZeneca, GSK and Johnson & Johnson.

There hasn't been a breach here.

And that's what makes this interesting. We're used to thinking about privacy in terms of hackers breaking into databases, but there's another question worth asking: what happens to your data when the organisation holding it changes, merges, gets acquired, or decides to use it for something else?

With a commercial app, you can at least read the terms and decide whether you want to use it. With the NHS, government systems, policing or social care, the relationship is different. You don't realistically get to say, "I'll just use another provider." Your medical history exists because you needed healthcare. Your information exists because you needed a public service. 
That's a very different relationship between a person and their data, and it's something we should be paying much more attention to.

A breach isn't the only way your data can leave your control. With centralised systems, once your information is collected, it is no longer truly yours.

https://news.sky.com/story/nhs-patient-data-groups-arcturis-and-akrivia-agree-140m-merger-13575267

Sakura Internet: up to 1.36M accounts potentially exposed in a hack. Centralised infrastructure means huge amounts of user data can sit behind a single target. Decentralised, private internet infrastructure offers a different model: less centralisation, less data concentration, fewer honeypots.

BleepingComputer

Sakura Internet hack exposes data of up to 1.36 million accounts

Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contrac...

Everyone give a good Nostr welcome to OWLI Media support! If you need to ask any questions require any support, just drop them a DM or @ them in a post!! @Owli - 🍀

Two new breaches just landed on HIBP, both dated today: 📍 Oz Hair and Beauty — ~1.99M accounts. Extortion group leaked emails, names, phone numbers, locations, purchase history. 📍 Fanlore — ~144.5K accounts. Unauthorized access exposed emails, usernames, and hashed passwords. Every one of these breaches has the same root cause: a central database somebody else was holding on your behalf. Your data sat on a server, and that server got hit. That's the whole model Owli refuses to build on. No accounts, no backend, no central store of your identity or messages, just a keypair only you hold. Nothing to breach because there's nothing sitting there to steal. Privacy by Architecture! Two more reminders today that the safest data is the data that was never centralized in the first place. #nostr #owli #privacy

Hello, Nostr Excited to introduce - Owli. A new private messaging client built on Nostr. No accounts, no phone number, no email. Your identity is your keypair : end-end encrypted with double ratchet for forward secrecy. Zaps are supported too! I’d welcome anyone t have an oil, have go, try it out provide feedback what’s great what could be improved. If your into private decentralised coms, or just want to see a new client grow following would mean a lot, lets build this together!! #nostr #priavcy #owli @jack @ Owli.chat