Skip to content

Topic

Law Enforcement Data Requests

Legal processes like subpoenas and warrants through which authorities seek user data, limited by what a provider's systems and encryption can produce.

Current stories

investOne report1 publisher

Anthropic and the FBI routed three Claude chats to police in seven weeks

Three conversations with Anthropic's Claude reached police between August 11 and September 30, and two of those users now face felony charges. Anthropic's own staff reported two of the cases, so the vendor's review team is one documented route from a chat to a charge.

Reality

Evidence62
Adoption
Not scored
Hype gap+5
Incentives
Not scored
Confidence58
productOne report1 publisher

Ring holds a copy of your camera key for 24 hours to keep video search running

Amazon's Throw Away the Key setting stops Ring from holding video keys permanently. Instead its cloud borrows a camera's key for up to 24 hours at a time so smart alerts, video search and descriptions keep working.

Publishers:techdirt.com

Reality

Evidence55
Adoption
Not scored
Hype gap+25
Incentives70
Confidence55
securityOne report1 publisher

Revolut phishing page requests camera access before imitating the bank's liveness check

Malwarebytes found smishing texts exploiting Revolut's breach within two days of the bank confirming it. The phishing flow asks for the phone camera and imitates the bank's own video identity check.

Reality

Evidence52
Adoption40
Hype gap+12
Incentives68
Confidence48
investOne report1 publisher

Revolut puts 150 million francs behind 1.3 million Swiss customers it already serves

Colombia's approval is Revolut's sixth banking licence and the FINMA filing would be its seventh. The same week, the bank was still working through a fraudulent legal request it honoured from a real government domain.

Reality

Evidence38
Adoption57
Hype gap+20
Incentives74
Confidence44
productOne report1 publisher

Waymo called police on its own riders after cabin cameras flagged a firearm

Two teenagers were arrested in early September after the robotaxi pulled over and alerted emergency services. Waymo described the policy in an email, and left out the confidence threshold and the human review step.

Publishers:theverge.com

Reality

Evidence68
Adoption55
Hype gap+12
Incentives58
Confidence64
securityOne report1 publisher

Forged government requests pulled passport data out of Revolut for five months

A hacker used a government employee's infostealer-compromised mailbox to send fraudulent requests to Revolut's Lithuanian subsidiary for about five months, and roughly 680 customers' passports and financial data went out.

Publishers:securityweek.com

Reality

Evidence45
Adoption55
Hype gap+20
Incentives65
Confidence50
securityOne report1 publisher

Fake police orders from a real Italian government mailbox got data on 680 Revolut customers

Revolut says its own systems were not breached; the fraudulent European Investigation Orders arrived from an authentic pec.interno.it mailbox, and the actor behind them claims six months inside Italian law-enforcement systems.

Reality

Evidence38
Adoption30
Hype gap+15
Incentives55
Confidence45
investOne report1 publisher

Revolut handed identity files and Bitcoin histories to an email that passed SPF, DKIM and DMARC

The request arrived from what looked like a government agency's domain, cleared all three email authentication checks, and Revolut's compliance team processed it. Notifications to affected customers began on September 11.

Reality

Evidence35
Adoption30
Hype gap+25
Incentives60
Confidence45
productOne report1 publisher

Ring's New Default Encryption Puts a Clock on What It Can Hand Police

Ring's new TAKE encryption deletes its own copy of video keys within 24 hours, reshaping what law enforcement can legally obtain from the cloud.

Publishers:theverge.com

Reality

Evidence58
Adoption22
Hype gap+24
Incentives78
Confidence52