Indeed's terms of service, last updated 29 September 2026 and read on 7 October 2026, give it a perpetual, transferable and sublicensable licence over User Content, which the terms say includes resumes and messages, to "develop, test, train, and improve machine learning and AI capabilities used in connection with Indeed's products or services". Deleting your content revokes only the licence to display it: Indeed "will cease public display" within "a commercially reasonable term". The version dated 14 April 2026 limited the licence to publishing, promoting and "maintaining or improving the Indeed website (including for the purposes of training a model that recommends content to other users)".
Its terms let it train AI on CVs and messages, and deleting them ends only their public display
affected · Indeed's licence over User Content
More events
The rest of the wire, newest first.
ASOS
Notice 8 Oct 2026
Notice October 2026
Customer profiles with addresses and site searches taken through a phished staff login
ASOS emailed customers on 8 October 2026 that someone "impersonating a trusted contact" got an employee's login and used it "to access information on certain third-party platforms used by Asos". A sample the attackers sent to BBC News holds names, addresses, phone numbers, emails, customer numbers and searches made on the site. Searches next to a name and an email are a record of what someone was looking at, including things they might never tell anyone. The attackers claimed to the BBC they got in through Simon AI, a marketing data platform. ASOS has named no platform; Simon AI's website lists ASOS as a customer. ASOS has given no numbers.
Notice · Retail
ASOS
Incident 6 Oct 2026
Incident October 2026
Attackers sent a push alert through its own app, threatening to leak its data
At about 10am on 6 October 2026, ASOS customers received a push notification through its app from attackers who said they had "fully compromised the Snowflake instance" and threatened to leak it. ASOS told the London Stock Exchange that day it was investigating unauthorised activity on "third-party platforms that we use to communicate with customers" and that "basic personal information including name and contact details may have been accessed". It said it did not believe payment card details or passwords were affected. Snowflake said its own platform had not been breached. The UK's National Cyber Security Centre tells every ASOS customer to assume they are affected, even without the notification.
Incident · Retail
Geon Media
Notice 29 Sept 2026
413,576 names on the rental list
Buyers of business opportunity programmes at seminars offered for rent as a list
A mailing list called Millennium Business Opportunity Buyers, managed by Geon Media, is offered for rent on the NextMark list directory. Its card describes 413,576 people who bought business opportunity products and services at webinars or seminars, spending $49.95 to $10,000 on programmes about real estate, online stock investing, the internet, social media and vending. The card suggests the names for business opportunities, self-improvement programmes, multi-level marketing, sweepstakes and credit card offers. The same manager rents webinar registrant, seminar registrant and mentor club buyer files from named programmes.
Notice · Advertising & Marketing