Date: Tuesday, January 6, 2026
Good afternoon! As we settle into the first full week of the new year, the digital landscape is already busy. From new privacy rights taking effect to data leaks involving major service providers, here is what you need to know to stay protected today.
Ledger Customer Data Leak: Owners of Ledger crypto hardware wallets are being alerted to a data exposure at Global-e, a third-party partner used for international orders. The leaked information includes customer names, contact details, and order history, though Ledger confirms their actual hardware and software remain secure. The Street
Broadband Breach Warning: U.S. fiber internet provider Brightspeed is currently investigating claims that a hacking group stole the personal information of over 1 million customers. The group, known as Crimson Collective, claims to have exfiltrated names, billing addresses, and account status data. Bleeping Computer
Taxpayer Data Could Be at Risk After Accounting Hack: A ransomware group claiming to hold sensitive tax and personal data from a U.S. accounting firm may put taxpayers at risk of identity or financial fraud. Criminals often use stolen tax information to file fake returns or open accounts in victims’ names.
Consumer Scam Calls and Fake Officials on the Rise: Government impersonation scams — where callers pretend to be from agencies like the Federal Trade Commission to frighten people into paying or sharing private information — remain widespread. These tricks shift quickly, so even familiar-sounding names can be fake. FTC
AI-Powered Scams Becoming More Convincing: A recent consumer survey shows that scams using artificial intelligence — such as fake voices or tailored phishing messages — are becoming much harder to spot, even for experienced internet users.
Botnet Malware Affecting Millions of Devices: Security researchers report a new type of malware network (called a botnet) that has infected over 2 million devices worldwide. Once compromised, home computers and gadgets can be used in widespread internet attacks or to send fraudulent traffic.
The "Social Security Statement" Email: Scammers are sending highly deceptive emails that look like official government notices.
How it works: The email asks you to click a link to "download your updated Social Security statement," but the link actually leads to a fake site designed to steal your personal details or infect your computer with malware. Office of Inspector General
The "Missed Jury Duty" Crypto Scam: A surge in reports shows scammers calling or texting people claiming they missed jury duty and must pay a "fine" to avoid arrest.
How it works: They pressure victims into sending "bail" or "fines" via Bitcoin or other cryptocurrencies, often using fake court documents to appear legitimate. Superior Court Maricopa County
The "New Year" Job Ad Trap: With many people seeking new careers in January, fake job advertisements are appearing on social media and professional sites.
How it works: These "remote work" ads look real but are designed to trick you into paying a "startup fee" or providing your Social Security number for a fake background check. ENEA
Check Your Inbox for Breach Alerts: If you are a Ledger or Brightspeed customer, look for official notifications regarding your data and be extra vigilant for phishing emails that might use your leaked contact info.
Use the "New Year" to Refresh Passwords: Change any passwords you’ve been reusing across multiple sites. Switch to a password manager to create and store unique, complex passwords for every account.
Enable Multi-Factor Authentication (MFA): Ensure all your financial, email, and social media accounts require a second "key"—like a code sent to your phone or a physical security key—to log in.
Set a Family "Safe Word": With AI-powered voice scams on the rise, agree on a secret word with your family. If you ever get a suspicious call from a "loved one" in distress, ask for the word to verify their identity.
Quick Tip: Never pay a "fine" or "fee" using cryptocurrency or gift cards, as legitimate government agencies and utility companies will never demand payment through these methods.