The incident, which occurred in June, was initially believed to be limited in scope. However, in a blog post this week, Google said the breach was broader than first reported, impacting not only Salesforce Drift but also other integrations.

According to Google Threat Intelligence, the attack—attributed to a group identified as UNC6395—allowed hackers to scan customer support tickets and messages, gaining access to sensitive information such as AWS access keys, Snowflake tokens, and passwords. Although Google maintains that no Gmail passwords were directly compromised, the company warned that users remain vulnerable to phishing and social engineering attempts.

Reports from Forbes indicate that Google has advised users to change their Gmail passwords and enable additional protections such as two-factor authentication and passkeys. The company also warned that attackers have begun impersonating Google employees via calls and text messages to trick users into revealing login details.

The cybercrime group ShinyHunter, linked to previous large-scale breaches involving Microsoft, Ticketmaster, and AT&T, has been named as the likely culprit. While much of the stolen data was already publicly available, Google said the attackers may attempt to use it to set up phishing websites.

The post Google Warns 2.5 Billion Gmail Users of Security Risk After Salesforce Data Breach appeared first on Tech Digest News.

It was an eye-opener, full of prescient warnings about the hidden costs of living in a world where our lives are increasingly mediated by technology. Ironically, neither of us imagined that the warnings in that book would soon play out so personally, and so dramatically.

Mr. Shuaib, a respected public relations expert and founder of PRNigeria, was a participant in the Senior Executive Course 47 at the National Institute for Policy and Strategic Studies (NIPSS). On May 2, 2025, he was abruptly suspended from the course.

His offense? Publishing articles that highlighted and supported President Bola Tinubu’s Digital and Blue Economy reforms. One article, “Understanding the ‘Blue’ in the Blue Economy,” praised the government’s innovative strides in marine resource development.

Another, “NIPSS Goes Digital,” celebrated the institute’s transition to a paperless administrative system—part of Nigeria’s broader digital transformation agenda. While he did not write or edit the latter, it appeared on his media platform.

In response to his suspension, Mr. Shuaib petitioned the President, citing harassment, cyberbullying, and professional ostracism. He argued that the action was punitive and lacked due process.

NIPSS, however, insisted he breached institutional policy by publishing materials related to the institute without clearance—a rule they claim he had previously been warned about.

But what escalated the matter beyond internal disciplinary lines was a chilling twist: PRNigeria’s editorial email account was allegedly compromised. Confidential communications between journalists and their sources, private story drafts, and editorial exchanges were reportedly accessed without consent.

The intrusion, attributed to officials of the same institute that suspended Mr. Shuaib, raised serious ethical and legal concerns. This was no ordinary data breach. It was a direct violation of professional boundaries, journalistic independence, and Nigeria’s own Cybercrime Act.

It represented something more insidious than just a lapse in judgment—it was, in many ways, a digital form of trespass. The incident sent ripples through media and security circles.

If an elite policy institute, tasked with grooming Nigeria’s future strategic leaders, could be implicated in such an act, what message does that send about our national commitment to digital ethics and rule of law?

It is precisely the kind of scenario “Born Digital” warns about—a world where our private digital footprints are vulnerable not just to hackers or corporations, but to institutions that should be protecting those rights.

In one haunting passage, the authors write: “Young people who are living their lives mediated by digital technologies will pay a higher price, sometimes down the road, for the way privacy is handled in this converged, hybrid environment…

“Most young people are extremely likely to leave something behind in cyberspace that will become a lot like a tattoo, something connected to them that they cannot get rid of later in life.”

That line has stayed with me. Because it is no longer just about young people. It is about all of us. Our identities, habits, preferences, locations, communications, and relationships—all are being recorded, stored, and sometimes exploited through what are now known as digital dossiers.

These dossiers are detailed archives of our lives, compiled by apps, platforms, websites, and even institutions. They are created often without our consent or awareness. While they promise convenience and personalized experiences, they also come with profound risks.

Privacy has become a currency we are forced to spend for access. And increasingly, it is a luxury only few can afford. The NIPSS breach is a wake-up call. It reveals the fragile boundaries between transparency and intrusion, between policy enforcement and personal violation.

It is a reminder that digital transformation must be matched by ethical responsibility and legal accountability. As a journalist, I have often lived under the illusion of digital safety.

But as a parent, I now worry for my young daughter and the millions like her growing up in a world where your data is your shadow—and sometimes, your shackle. We must do more. We must demand stronger data protection laws, foster a culture of privacy awareness, and hold institutions—no matter how revered—to account.

Our digital world should not come at the cost of our humanity, our dignity, or our freedom. The threats are real. The consequences are near. And the time to act is now.

The post NIPSS, PRNigeria and the Alarming Breach of Digital Ethics – By Usman Muhammad Salihu appeared first on Tech Digest News.

TECH DIGEST- Over 110 organisations in Nigeria are being investigated for alleged data breaches, according to the Nigeria Data Protection Bureau (NDPB).

At a media roundtable in Lagos, Dr. Vincent Olatunji, the National Commissioner of the Bureau, revealed this.

READALSO: Valentine’s Day: Google Trends show Nigeria leading in search for love

He claims that businesses like banks, telecom companies, gaming businesses, and internet lending businesses are among those under investigation. He claimed that these industries had significant vulnerabilities in part because of the intrusive mobile apps that these companies use to deliver their services.

The Bureau recently licenced 48 more Data Protection Compliance Organizations (DPCOs), bringing the total number of DPCOs to 138, according to Olatunji. The National Commissioner claims that this has increased the ecosystem’s richness and job development.

Nigeria, he claimed, was ready to take the lead in increasing data privacy and investigating the possibilities offered by the global digital economy. Olatunji assured the populace that any unlawful processing of personal data from their territory would result in accountability for every data controller and data processor, whether they were based in Nigeria or not.

President Muhammadu Buhari formed the NDPB in February 2002 to serve as the country’s data protection authority and to completely carry out the requirements of the Nigeria Data Protection Regulation (NDPR), which was released in 2019.

The post NDPB: Nigeria Probes 110 Firms for Data Breaches appeared first on Tech Digest News.

TECH DIGEST:  A top US law firm used by Google has confirmed it was hit by a data breach.

The immigration law firm Fragomen, Del Rey, Bernsen and Loewy said that the breach saw the personal information of current and former Google employees affected.

The company did not say exactly what data was accessed or how many employees were affected, but the firm looks after a wide range of Google’s immigration law cases, meaning hundreds of workers could have had their information stolen.

Fragomen plays an important role for Google’s workforce, offering verification screening services to determine if employees are eligible and authorized to work in the United States.

In its filing to the Attorney General, Fragomen said that the breach was caused by an unauthorized third party accessing a file that contained such personally identifiable information on a “limited number” of current and former Google employees.

All companies operating in the United States are required to maintain a Form I-9 file on every employee to ensure that they are legally allowed to work and not subject to more restrictive immigration rules.

However these Form I-9 files contain a lot of sensitive information about the subject, as well as government documents such as passports, ID cards and driver’s licenses.

Both companies will hope that the incident is not too serious, as the repercussions for falling foul of a data breach can be very expensive.

A recent report from IBM found that falling victim to a data breach can be devastating for a company’s reputation as well as to its bottom line, with each incident costing companies an average of $3.86m per breach.

The post Google’s Law Firm Hit By Data Breach appeared first on Tech Digest News.