Privacy Intelligence
Quarterly
The threat landscape doesn’t pause for quarter-end. Each quarter we compile the most significant breach events, data broker developments, OSINT technique shifts, and executive privacy risks — in a single, readable briefing delivered to your inbox.
Next Issue: Q3 2026 · October
Subscribe — Free
Join executives, legal professionals, and privacy practitioners who use this briefing to stay ahead of emerging threats. First issue delivered within 24 hours.
What’s Inside Each Issue
Real intelligence. No vendor fluff. Each quarterly briefing covers the events and developments that matter for your privacy and security posture.
Top Breach Analysis
The quarter’s most significant breaches — what was exposed, who is affected, and what the attack vector reveals about systemic risks.
OSINT Technique Watch
Emerging methods being used against executives and private individuals — from AI-assisted profile building to deepfake impersonation.
Data Broker Developments
New data sources, regulatory changes, and removal tactics — including what’s changed since the last issue and what actions to take now.
Regulatory & Legal Updates
GDPR enforcement actions, CCPA changes, emerging AI data legislation, and what organisations need to address before the next deadline.
Practical Recommendations
Actionable steps — not generic advice. Specific tools, opt-out procedures, account hardening steps, and monitoring tips for this quarter.
Threat Landscape Overview
The quarter’s key patterns: which threat actors are most active, which sectors are being targeted, and what the next quarter is likely to bring.
Sample Intelligence Cards
Here’s the kind of intelligence our subscribers receive. Full analysis and action steps are included in the briefing.
Stealer Logs Are Turning Live Session Cookies Into Skeleton Keys
A single infected device now yields a corporate VPN credential, a password-manager vault, and a live session token in one package, and a stolen session cookie lets an attacker skip the password and the MFA prompt entirely. Dark-web alerts catch part of the commodity layer; they do not reliably catch the operator who buys fresh access before it surfaces in a broadly visible feed. Full briefing includes the account-layer audit that closes this gap.
The European Commission Was Breached Through Its Own Vulnerability Scanner
CERT-EU confirmed that a poisoned release of a widely trusted open-source scanner was used to steal AWS credentials from the Commission's CI/CD pipelines; CERT-EU attributed the initial access to a group tracked as TeamPCP, and ShinyHunters later published 91.7 GB including an SSO directory and DKIM signing keys. The pattern that defined Q2: organisations reached through the tools and suppliers beneath them rather than head-on. Full briefing maps the third-party exposure this creates.
2026 Briefing Calendar
Each issue covers the preceding quarter and ships in the first week of the following quarter. Archive issues available to all subscribers.
Q1 Issue · Published
Q1 2026 Briefing — January–March
Odido breach aftermath and 30-day criminal timeline, vishing as Q1’s dominant attack vector, data broker removal research and GDPR enforcement, Signal/WhatsApp account hijacking campaigns, three quarterly OPSEC actions.
- Published April 2026
- Available to all subscribers
Q2 Issue · Published
Q2 2026 Briefing — April–June
How exposed personal, corporate, and family data became attack infrastructure: the European Commission supply-chain breach, data brokers rebuilding profiles, stealer logs and live session cookies, third-party and board-level exposure, and three actions for Q3.
- Published July 2026
- Available to all subscribers
Q3 Issue · Upcoming
Q3 2026 Briefing — July–September
Summer breach landscape, regulatory developments, and data broker tactics from July through September 2026. Actionable quarterly recommendations included.
- Expected: October 2026
Q4 Issue + Year-End Report · Planned
Q4 2026 Briefing + Annual Threat Report
Full-year breach analysis, 2026 threat landscape retrospective, and annual OPSEC recommendations. Extended edition in annual report format.
- Expected: January 2027
- Extended edition — annual report format
Stay Ahead of the Threat Landscape
The Q2 2026 issue is out now. Subscribe to receive it and the Q1 archive immediately, with the Q3 issue arriving in October.
Subscribe — Free