Date: Monday, January 19, 2026 Keeping you safe in a connected world.
Grubhub Reports New Data Leak via Chat Support The popular food delivery service, Grubhub, has confirmed that unauthorized individuals recently downloaded data from its customer support systems. The hackers reportedly gained access through a third-party tool used for customer chats. While account passwords appear safe, information shared during support chats—like names or order details—may have been exposed. If you’ve contacted Grubhub support recently, be extra wary of any follow-up emails asking for your login info. PC Magazine
Major Internet Provider Investigates Possible Breach Brightspeed, one of the largest fiber internet providers in the U.S., is currently investigating claims that a group has stolen data belonging to over 1 million customers. The allegedly stolen info includes names, addresses, and partial payment details. While the company has not yet fully confirmed the extent of the breach, customers are encouraged to keep a close eye on their billing statements for any unusual activity. The Cyber Guy
Apple and Microsoft Release Emergency Fixes It has been a busy week for tech giants. Apple has rolled out iOS 26.1 to fix a critical security "hole" that could allow hackers to take control of an iPhone. Meanwhile, Microsoft released an "out-of-band" emergency patch after its latest Windows 11 update accidentally broke the "Shut Down" and "Hibernate" buttons on many PCs. If your computer or phone is acting up, a quick check for updates should solve the problem. CNET - Apple Update ENGADGET - Microsoft Update
Betterment Investors Targeted by Phishing Digital investment advisor Betterment disclosed that a breach at a marketing partner allowed hackers to send out convincing "crypto phishing" emails. These emails look like official Betterment communications but try to trick users into giving away their digital currency credentials. If you get a surprise email about "new crypto opportunities" from your investment app, do not click the links. Tech Crunch
Here are current scam types being seen in the wild — watch for these patterns:
The "Tax Resolution" Phone Trap: Scammers are calling homes claiming to be from the "Tax Mediation Agency." They tell you that you owe back taxes and offer a "red flag check" on your credit. How it works: They want your Social Security number and an "upfront fee" to solve a problem that doesn't exist.
The "Look-Alike" Email (Homograph Attack): Watch out for emails that look like they are from rnicrosoft.com (using an "r" and "n" instead of an "m"). How it works: These look-alike addresses bypass your brain's natural filters, leading you to fake login pages that steal your password.
Fake Delivery Chat Alerts: Following the Grubhub news, scammers are sending texts that look like a "Chat Support Follow-up" about a missing meal. How it works: They include a link to a fake support page to "verify your identity" by asking for your credit card number.
Here are simple steps you can take right now to protect yourself:
Update Your Devices: Check your iPhone settings for iOS 26.1 and run Windows Update on your PC to ensure you have the latest emergency fixes.
Screen Your Tax Calls: If someone calls claiming to be from the IRS, hang up. The IRS always sends a letter in the mail first. If you’re worried, call the official IRS line at 1-800-829-1040.
Check Your "Support" Emails: If you receive an email from a service like Grubhub or Betterment, don't click the links in the message. Instead, go directly to the official website or app to check your account status.
Monitor your accounts: Check bank, credit card, and billing statements for unfamiliar charges or activity and report anything unusual promptly.
Use strong, unique passwords: Never reuse the same password across multiple accounts; consider using a reputable password manager to help.
Enable two-step verification: Turn on extra security steps (like text codes or app prompts) for online accounts when available.
Be cautious with personal info online: Don’t share sensitive details on social platforms or in messages unless you’re sure who you’re dealing with.
Learn how passkeys can help secure your accounts.
Report Scams to the Pros: If you get a suspicious tax email, forward it to phishing@irs.gov. This helps the government shut down the scammers' servers faster.
Always check a sender's real email address by tapping their name on your phone; a "Bank of America" email that actually comes from xyz789@gmail.com is a guaranteed scam.
Passkeys are digital credentials that let you sign into apps and websites using your device’s fingerprint, face scan, or screen lock instead of a typed password. They are significantly more secure because they are unique to every site and impossible to guess, which effectively blocks common hacking methods like phishing. Most importantly, since the private part of the "key" never leaves your device, your accounts remain safe even if the company you're logging into suffers a major data breach.
Check for Data Breaches: HaveIBeenPwned.com
Report Scams: ReportFraud.ftc.gov or IC3.gov
Free Credit Reports: AnnualCreditReport.com
California Data Deletion: privacy.ca.gov