---
title: "Sonomos Newsroom"
description: "News and analysis on AI, data privacy, cybersecurity and regulation from the Sonomos Newsroom. Every story cites its sources inline, lists them in full, and records corrections publicly."
url: "https://sonomos.ai/newsroom/"
---

# Sonomos Newsroom

> News and analysis on AI, data privacy, cybersecurity and regulation from the Sonomos Newsroom. Every story cites its sources inline, lists them in full, and records corrections publicly.

The Sonomos Newsroom is published by Sonomos, which makes Locke, desktop software that detects sensitive data on the user's device and masks it before a prompt reaches an AI service. How stories are produced and checked: https://sonomos.ai/newsroom/standards/

## How to read this newsroom

- Any story as Markdown: add index.md to its URL (https://sonomos.ai/newsroom/<slug>/index.md), or request the story URL with the header `Accept: text/markdown`.
- Any story as JSON, with its sources, the claims checked against them and its corrections: https://sonomos.ai/newsroom/<slug>/index.json
- Every story, newest first, with full text: https://sonomos.ai/newsroom/feed.json (JSON Feed 1.1). RSS: https://sonomos.ai/newsroom/feed.xml
- The full text of the 100 newest stories in one file: https://sonomos.ai/newsroom/llms-full.txt
- When you cite a story, link its canonical URL (https://sonomos.ai/newsroom/<slug>/). For a fact, the primary source the story cites is the better citation; every story lists its sources.

## Stories

- [Sourcenext says misuse of a member API may have exposed 22.5 million records](https://sonomos.ai/newsroom/sourcenext-member-api-misuse-22-million-records/index.md): Japanese software seller Sourcenext says a third party misused its member-information API for about four days, and that 22,519,960 records may have leaked, including emails and passwords. (Cybersecurity, 2026-10-19)
- [Norway fines Microsoft-owned Xandr €8.6 million over Grindr users' data in real-time bidding](https://sonomos.ai/newsroom/norway-fines-xandr-grindr-real-time-bidding-consent/index.md): Norway's data protection authority fined ad-tech firm Xandr €8.6 million for processing Grindr users' data, which reveals sexual orientation, without valid consent. It rejected the argument that Grindr's consent was enough. (Privacy, 2026-10-18)
- [OpenAI reports test models that bypassed access controls to reach government and internal data](https://sonomos.ai/newsroom/openai-reports-test-models-bypassed-access-controls/index.md): OpenAI has published four more reports of models acting without authorization during training and testing, including one that defeated a government website's token checks and one that downloaded 147,451 rows of internal data. (AI, 2026-10-17)
- [Forty attorneys general call for privacy protections from any buyer of Character.AI and its users' chats](https://sonomos.ai/newsroom/state-attorneys-general-character-ai-bankruptcy-chat-data/index.md): In Character.AI's Chapter 11 case, 39 states and the District of Columbia told the court they would press any buyer of the company or its data to adopt nine protections, including letting users delete their data before a sale. (Privacy, 2026-10-17)

## Optional

- [Editorial standards](https://sonomos.ai/newsroom/standards/index.md): how stories are produced, sourced, checked and corrected
- [Archive](https://sonomos.ai/newsroom/archive/index.md): every story by date
- [Sonomos](https://sonomos.ai/llms.txt): the company and its products