Carhartt Data Fallout, Uber AI Fine & Norway DDoS

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. It delivers concise, decision-focused coverage for CISOs, security leaders, and executives. Today’s five stories:

1. 01

   Carhartt’s reported breach count fell from nearly 25 million to about 12.9 million after synthetic benchmark data, duplicates, and inactive addresses were removed from a Databricks analytics warehouse. The incident shows how unverified figures can mislead executives, distort public reporting, and overstate business and customer impact.

2. 02

   A major DDoS attack has disrupted Norway’s shared government digital infrastructure, affecting login, e-signature, secure mail, and data exchange services. Although there is no evidence of a breach or data loss, the repeated attacks expose the operational fragility of critical public services and have triggered notifications to security and privacy authorities.

3. 03

   The Dutch Data Protection Authority fined Uber €825 million over automated driver suspensions made without meaningful human review or clear disclosure. Uber is appealing, but the case signals that AI-driven decisions affecting livelihoods require transparency, accountability, and human oversight.

4. 04

   Researchers uncovered AnonyMousKIT, a phishing-as-a-service operation using voice AI to steal iPhone passcodes, Apple credentials, and two-factor codes. With hundreds of domains and reseller stores, the scheme threatens personal and corporate data stored in iCloud, Keychain, and managed devices.

5. 05

   A CISA red-team exercise found that both a government organization and a water utility were breached, but only the utility detected and contained the intrusion quickly. The results highlight enduring weaknesses in phishing resistance, cloud security, access controls, incident response, and critical-infrastructure resilience.