Project Compass Disrupts "The Com" Extremist Network in First Year of Operation In its inaugural year, Project Compass a multinational initiative has achieved significant operational results against "The Com", a decentralized extremist network targeting minors and vulnerable individuals both online and offline. The project, which facilitates coordinated investigations, rapid threat response, and structured information sharing among 28 countries, has led to the identification of 179 perpetrators and 62 victims since January 2025. Among its key outcomes, Project Compass has supported nine joint awareness-raising activities, reinforcing cross-border collaboration in countering digital extremism. The effort underscores the growing role of international partnerships in addressing transnational cyber threats. Separately, a recent legal ruling by the Tenth Circuit Court determined that the Fourth Amendment does not justify broad searches of protesters’ digital devices, setting a precedent for digital privacy protections. Meanwhile, a convicted online predator pleaded guilty to hacking social media accounts and extorting hundreds of teens and young adults, highlighting the persistent risks of digital exploitation. In other developments, Israel reportedly launched the largest cyberattack in history against Iran, causing widespread disruptions. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) also released new guidance on establishing multi-disciplinary insider threat management teams, while hacktivists claimed to have breached the Department of Homeland Security (DHS), leaking ICE contract data. Additional incidents include a South Korean police error that resulted in the loss of seized cryptocurrency after posting a password online, and a Connecticut Senate bill proposing stricter data breach response requirements. Meanwhile, Iowa accused General Motors of failing to disclose OnStar data-sharing practices, and Insight Hospital and Medical Center suffered a data leak exposing sensitive information on the dark web.

The Washington State Office of the Attorney General reported a data breach involving General Mills, Inc. on January 12, 2023. The breach, which occurred between November 18 and December 31, 2022, compromised the names and full dates of birth of approximately 18,268 users. This incident highlights the vulnerability of personal information and the importance of robust cybersecurity measures to protect sensitive data.