Code Exposure and Tightening Privacy Rules

Good morning. This week brings two distinct reminders that infrastructure security and regulatory compliance continue to demand attention.

Target is managing the fallout from a breach that didn't touch customer records but instead exposed 860 GB of internal source code — the kind of loss that quietly makes future attacks easier to design. Meanwhile, three US states have ended their privacy law grace periods, meaning organizations now face immediate enforcement without time to remedy violations first.

Two stories this week, each pulling at different threads in the broader fabric of organizational risk.