Key developments
Amazon Ring sued over facial recognition feature
Reuters reported that Virginia resident Charles Sigwalt filed a proposed class action in federal court in Seattle accusing Amazon of collecting and storing face images through Ring's optional "Familiar Faces" feature. The complaint says the AI tool identifies and remembers people and can label returning visitors at a home or business without consent. Sigwalt is seeking at least $5 million in damages; Amazon declined to comment.
Why it matters
The case targets a consumer biometric feature and could shape consent rules for home-security facial recognition.
Sources & driving stories
YAHOO · Greg Bensinger
Yahoo coverageCarnival breach exposes nearly 6 million
USA Today reported that Carnival said a social-engineering attack on a single employee let cybercriminals access a limited part of its IT system on April 14. The company said it later determined customer data had been compromised, and a Maine attorney general filing pegged the impact at nearly 6 million people. Exposed records may include names, addresses, email addresses, phone numbers, dates of birth, and government IDs such as driver's licenses and passports, and Carnival is offering two years of free credit monitoring through TransUnion.
Why it matters
The breach puts highly sensitive identity data at risk for millions of passengers and raises fraud exposure tied to cruise travel records.
Sources & driving stories
USA TODAY
USA Today coverage23andMe seeks to halt California breach suit
Law360 reported that a 23andMe bankruptcy plan administrator asked a Missouri bankruptcy court to shut down a California attorney general lawsuit tied to the company's 2023 data breach. The state is seeking potentially millions of dollars in statutory penalties over alleged security and disclosure failures, while the company argues those claims should not proceed outside the Chapter 11 case. The dispute will test how much privacy enforcement can continue during bankruptcy.
Why it matters
The ruling could affect whether state privacy penalties survive a debtor's restructuring.
Sources & driving stories
LAW360 · Allison Grande
Law360 coverageWorth noting
WORTH NOTING
800,000 Texans caught in Carnival breach
The local breakdown shows how heavily the incident hit Texas cruise passengers, especially through Galveston.
WORTH NOTING
Survey backs AI surveillance with guardrails
Security Systems News reported a Harris Poll-backed benchmark finding broad support for AI cameras, facial recognition, and ALPRs when deletion windows, signage, and feature controls are required.
Still unclear
OPEN QUESTION
Will Ring's face data count as biometrics?
The lawsuit could force courts to decide whether optional home-security face recognition triggers biometric-consent rules.
OPEN QUESTION
Can bankruptcy curb 23andMe penalties?
The answer will affect how much leverage state privacy enforcers retain once a breach defendant enters Chapter 11.