Government & public sector2020
Source: Information Commissioner’s Office ·
Hackney: a dormant account still opened a door
A council attack exposed the risk of old accounts remaining connected to sensitive systems.
Read the briefingFilter briefings
Find a case like yours
Start with your industry, or explore the access decision you face.
Years refer to incidents or evaluations, not later source reports. Cases without a stated incident year are grouped separately. Filters can be combined.
All briefings
Page 3 of 5
Consumer services · Technology & SaaSYear not specified
Source: Federal Trade Commission ·
Avast: software marketed for privacy became a source of browsing data
The FTC settled allegations that detailed browsing information was sold without adequate notice or consent.
Read the briefingLegal servicesYear not specified
Source: Information Commissioner’s Office ·
Levales Solicitors: valid credentials exposed confidential client data
The ICO documented cloud-server access using legitimate credentials and subsequent publication of client data.
Read the briefingTechnology & SaaS · Legal services2024
Source: Dropbox Sign ·
Dropbox Sign: an automated account opened the customer database
An attacker compromised a service account with privileges in the signing service’s production environment.
Read the briefingTechnology & SaaS2024
Source: Mandiant / Google Cloud ·
Snowflake customer accounts: old stolen passwords still worked
Mandiant traced a data-theft campaign to stolen customer credentials, rather than a Snowflake platform breach.
Read the briefingGovernment & public sector2021 / 2022
Source: Information Commissioner’s Office ·
Electoral Commission: one system exposed a population-scale register
The ICO linked prolonged access to electoral-register information with unpatched software vulnerabilities.
Read the briefingConsumer services · Technology & SaaSYear not specified
Source: Federal Trade Commission ·
InMarket: location permission became a behavioral profile
The FTC challenged collection and advertising uses that consumers were not adequately told about.
Read the briefingHealthcare & life sciences2021
Source: Federal Trade Commission ·
Cerebral: access to medical records outlasted employment
The FTC alleged that former employees retained access to confidential patient records.
Read the briefingNo briefings match these filters
Try a broader search or remove a filter to explore related cases.
Why we’re building Vivendur
These briefings make the need for clearer access boundaries concrete. Vivendur is building private AI memory so organizations can choose what each tool receives for a task. The cases inform that work: limiting unnecessary disclosure, separating permissions between tools, and being clear about what happens after information is shared.
Our approach to reporting
We link to original disclosures, distinguish incident dates from publication dates, and label our interpretation. These cases raise different security questions; they do not establish that Vivendur could have prevented them.
See these access decisions in Vivendur in action