The case for Vivendur
Sensitive information should not travel further than the task requires. These real-world incidents show what happens when control over access, sharing, and reuse breaks down, and why we’re building Vivendur.
Start with your industry, or explore the access decision you face.
Years refer to incidents or evaluations, not later source reports. Cases without a stated incident year are grouped separately. Filters can be combined.
Page 5 of 5
Healthcare & life sciences · Consumer services · Technology & SaaSYear not specified
Source: Federal Trade Commission ·
The FTC alleged that embedded tracking tools disclosed sensitive app data without users’ consent.
Read the briefingConsumer services · Technology & SaaS2022
Source: LastPass ·
LastPass disclosed theft of cloud backups containing customer data, vault backups, and secrets.
Read the briefingHealthcare & life sciences · Consumer servicesYear not specified
Source: U.S. Department of Justice ·
A court order restricted health-data sharing following allegations of unauthorized disclosure.
Read the briefingTechnology & SaaS2022
Source: GitHub ·
Tokens issued to Heroku and Travis CI integrations were abused to download private repositories.
Read the briefingConsumer services · Technology & SaaS2017
Source: Federal Trade Commission ·
A vulnerable consumer portal became an entry point to much broader personal information.
Read the briefingGovernment & public sector2015
Source: U.S. Government Accountability Office ·
A GAO review examined safeguards after breaches involving highly sensitive government records.
Read the briefingTry a broader search or remove a filter to explore related cases.
These briefings make the need for clearer access boundaries concrete. Vivendur is building private AI memory so organizations can choose what each tool receives for a task. The cases inform that work: limiting unnecessary disclosure, separating permissions between tools, and being clear about what happens after information is shared.
We link to original disclosures, distinguish incident dates from publication dates, and label our interpretation. These cases raise different security questions; they do not establish that Vivendur could have prevented them.
See these access decisions in Vivendur in action