Please tell me about data breaches

Hello - I’m a reporter for a news station in Washington state, working on a story about data breaches. I am hoping to connect with anyone who has something to say on this topic! I’ve read many insightful threads/comments and it’s clear there are many experts on this website. My reporting is focused mainly on WA’s data breach law, and breaches impacting Washingtonians… but breaches seemingly don’t observe borders, so this doesn’t limit the scope of sources I’m looking for. Some specific things I’d love to talk about: // Any info which hasn’t been widely reported a data breach, particularly on late notifications or cover ups by data controllers // Any personal anecdotes/stories/etc. about a data breach // The relationship between legal data broking and the illicit data market // The role of offensive cybersecurity (and more broadly the surveillance/intelligence apparatus) in making private info vulnerable // Data breach notification laws – specifically WA state’s and others which are similar. Do they meaningfully protect people? Do companies etc. follow this law – particularly notification timeline requirements? // Any proactive measures/laws/etc. which might better protect people from privacy violations and data breaches // Holes in the mainstream narrative about data breaches (e.g. the perpetrators are located in whichever country the US considers the enemy) // Common misconceptions to avoid in reporting on this topic, reading or source recommendations, philosophical insight, etc. etc. etc. (aka anything you find interesting and are willing to share with me) Feel free to email me at gkt two six (at) cornell (dot) edu. (remove spaces and replace two six with 26). From there I can share my protonmail/signal/phone number. Or you can leave a comment here if preferred. If you’d prefer to speak “off the record” – either initially or always – that is cool with me and will be 100% honored. Thank you so much, and I hope you all are having a great day! - Gracie