Blog
Notes on privacy, in plain language.
Live now
Stories we’re updating as they develop.
Malware · October 11, 2026 · 4 min read
Two new Android banking trojans, one warning sign: the Accessibility permission
RemControl targets banking apps in Canada and Europe, and a Google Play PDF reader delivered Anatsa. How they work and what to check on your phone.
Research · October 11, 2026 · 4 min read
California is fining data brokers. What that tells Canadians
California’s privacy regulator has shut down one people-search site and fined a string of data brokers since 2025. What they did wrong, and what it means if you live in Canada.
Breach · October 11, 2026 · 3 min read
The Canadian Tire breach: 38 million accounts, and what to do now
An October 2025 breach exposed online account details for Canadian Tire, SportChek, Mark’s and Party City shoppers. What was taken, what wasn’t, and the steps worth taking.
Breach · October 11, 2026 · 3 min read
The Loblaw breach: what was taken, and what to do now
Loblaw says names, addresses, birth dates, PC Optimum numbers and partial card details were exposed. Here’s what that means and the few steps worth taking.
Guide · October 11, 2026 · 4 min read
Lock down your Google and Apple accounts: passkeys, recovery and sessions
Your Google or Apple account can reset almost everything else you use. A calm, 20-minute walkthrough: stronger sign-in, recovery you control, and a check of every signed-in device.
Scams · October 11, 2026 · 4 min read
How scammers use leaked data to make phishing personal, and how to spot it
A message that knows your name, your address and what you bought feels real. Here’s how breach data turns generic scams into personal ones, and the tells that still give them away.
Scams · October 11, 2026 · 4 min read
SIM swaps: how someone takes your phone number, and how to lock it down in Canada
If someone moves your number to their SIM, your texted sign-in codes go to them. How SIM swaps and port-outs work, the protections Canadian carriers offer, and what to do if it happens.
Guide · October 10, 2026 · 4 min read
What to do after a data breach in Canada: a calm checklist
Got a breach notice? Most of what matters takes about twenty minutes. A step-by-step checklist, including the free credit lock now open to Ontario and Quebec residents.
Malware · October 9, 2026 · 3 min read
Fake “verify you’re human” pages are installing malware. Here’s the tell.
ClickFix pages pose as a CAPTCHA, then ask you to paste a command. No real check ever does that. How the trick works and what to do if you fell for it.
Research · October 8, 2026 · 3 min read
Bill C-36: what Canada’s proposed privacy law would change for you
Ottawa wants to replace PIPEDA with the Protecting Privacy and Consumer Data Act. What it proposes, what it doesn’t settle yet, and what stays the same until it passes.
Malware · October 7, 2026 · 4 min read
How infostealers steal your sessions, and why a new password isn’t enough
Infostealer malware takes the cookies that keep you signed in, so attackers can skip your password and your two-factor code. How it works and how to recover properly.
Breach · October 6, 2026 · 3 min read
The phone call behind 2026’s biggest breaches
Many of this year’s large data thefts started with someone phoning an employee and posing as IT. How the calls work, why your data was caught up, and what you can do.
Scams · October 5, 2026 · 3 min read
What Canadians reported losing to fraud in 2025, and the scams behind it
The Canadian Anti-Fraud Centre logged over 112,000 reports and $704 million in losses in 2025. The scams that cost the most, and the warning signs they share.
Guide · October 4, 2026 · 4 min read
How to opt out of data brokers in Canada (2026 guide)
People-search sites and data brokers publish addresses, phone numbers and relatives. What Canadian law lets you ask for, how to make a request, and what to expect.
Breach · October 3, 2026 · 3 min read
The Canvas breach: what students and staff in Canada should know
A breach of Instructure’s Canvas reached schools worldwide, including UBC, SFU and U of T. What was taken, what wasn’t, and the scams to watch for.
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.