'White FAANG' Data Export Attack: A Gold Mine for PII Threats

The report warns that GDPR-enabled data portability, while beneficial for privacy and transparency, creates a potent abuse path: once attackers hijack personal accounts (even with MFA bypass), they can legally export comprehensive, machine-readable datasets containing PII, activity histories, device details, and credentials, enabling blackmail, targeted exploitation (e.g., leveraging known CVEs), and corporate intrusion due to widespread personal–work account commingling. It urges strict separation of personal and corporate accounts and heightened controls to mitigate this emerging TTP.