Here we go again: 2023’s badly handled data breaches

This TechCrunch dossier recounts several major 2023 security incidents and poorly handled disclosures: a mass data breach at the UK Electoral Commission exposing up to 40 million voter records; a year-long Samsung UK customer-data breach; a Shadow breach exposing API keys and customer data; Lyca Mobile and Dish incidents with unclear scope and potential exposure of identity and financial records; MGM Resorts’ intrusion (Scattered Spider) leaking sensitive customer documents; and ransomware-driven leaks at CommScope (Vice Society). The piece highlights large-scale exfiltration of highly sensitive PII, active ransomware actors, and widespread corporate silence or delayed notification.