#FactCheck - Viral Video of Sachin Tendulkar Commenting on Joe Root Is AI-Generated

Introduction

‍

Over the last few years, several public data breaches in Venezuela have revealed a lack of cohesion and progress in its data privacy system and left many people susceptible to fraud, identity theft and long-term harm via the internet. It is clear from these data breaches that when organizations fail to adequately protect their data, both through cybersecurity failures and weak legal protections, they can lead to problems throughout an entire system through which all individuals in the system could potentially suffer.

Among the more notable breaches are the Movistar Venezuela data breach from 2025 and the Cashea App data leak from earlier this year. Each of these examples demonstrates to some extent how the absence of an adequate privacy regulatory scheme can worsen the results of a data breach.

‍

The Movistar Breach: A Regulatory Warning (2025)

‍

Venezuelan digital rights group VE Sin Filtro published a report late in April 2025, which found a database revealed to have been opened onto the internet containing personal information belonging to over 3.2 million Movistar customers. The initial breach contained personal, and confidential, data of Venezuelan citizens such as national identification numbers, full names, city of residence, and phone numbers which could have been exploited to commit identity theft, SIM-swap fraud, and targeted scams.

One significant issue with this situation was that Movistar failed to disclose the breach publicly or contact impacted customers at the time of the disclosure. As a result, there appears to be a significant gap in Sanctions / Other Means of Enforcing Security Countermeasures Laws. Since there are numerous countries that enforce GDPR-style regulations and as such, this matter should lead to a complete investigation and possible fines against those responsible but in Venezuela there is still a lack of accountability.

‍

Cashea App Leak: A 2026 Data Shock

‍

A second alleged data breach came to light in February of 2026. It involved a Venezuelan buy-now-pay-later (BNPL) fintech called Cashea App, which is typically heavily utilized domestically. Reports have circulated that threat actors have been offering a database, believed to hold more than 79 million transaction records. This is more than double the size and sensitivity of the data involved in the Movistar Breach.

According to reports, the leaked data included:

1. Bank account details and payment methods
2. Merchant profiles and internal business identifiers
3. Detailed transaction histories with names, national ID numbers, timestamps, and installment data

This level of exposure goes far beyond basic identifiers. Financial transaction histories combined with personal identifiers enable sophisticated fraud, targeted social engineering, and long-term misuse of financial identities. As with the Movistar breach, no official acknowledgment or notification was issued by Cashea at the time of reporting, again underscoring Venezuela’s weak enforcement environment.

‍

Why These Breaches Matter: The Legal Dimension

‍

The incidents show us that there is a bigger problem with the way Venezuela has set up its framework for protecting data. For instance, the Venezuelan Constitution recognises the principles of data protection and privacy; however, these rights only exist in a theoretical manner; they lack implementing legislation, procedural clarity, and institutional enforcement.

‍

Constitutional Basis of Data Protection

‍

The Supreme Tribunal of Justice (TSJ) stated the core principles for protecting data are found in the Venezuelan Constitution. After the TSJ issued its 2011 ruling, Article 28 of the Venezuelan Constitution gives individuals the right to know what data the state has about them, how the state uses that data, and to correct or delete any harmful data. Article 60 of the Venezuelan Constitution protects individuals' privacy and restricts excessive data collection by the state.

The Constitutional Chamber also put into place additional guiding principles for how to protect personal data, including:

1. The data subject must give prior informed and revocable consent.
2. The purpose for which the data is collected must be specified and only the minimum amount of information necessary can be collected.
3. The data collected must be accurate and of good quality.
4. There are confidentiality obligations for third parties regarding the use of the data.
5. It is the government's responsibility to put into place procedures and mechanisms to monitor compliance with the data protection laws.
6. There are civil, criminal and administrative liabilities for individuals and legal entities that violate the data protection laws.

But, in a civil law country, when courts make rulings, they usually are persuasive only as opposed to being legally binding, and even constitutional rulings cannot be implemented until enabling legislation is passed.

‍

Absence of a Comprehensive Data Protection Law

‍

In contrast to the European Union's GDPR (General Data Protection Regulation), the United States' sectoral approach, and emerging Latin American data protection systems such as the ones in Brazil, Chile and Colombia, Venezuela has no independent data protection law. This lack of law leads to numerous types of uncertainty in the realm of data protection laws:

1. No defined data controller or processor obligations
2. No standardized lawful bases for processing
3. No clear breach notification timelines
4. No independent data protection authority
5. No procedural pathway for individuals to seek redress

As a result, data protection in Venezuela is not treated as an independent legal discipline but instead becomes derivative, arising incidentally within constitutional litigation or sector-specific disputes.

‍

Regulatory Fragmentation and Institutional Weakness

‍

Due to the TSJ decisions made in 2011, there has been a lack of regulatory action taken in a systematic fashion and instead most actions have been done on a case by case basis as valid incidents arise. The National Cybersecurity Council was established in 2024; however, its function is to support the establishment of cybersecurity infrastructure and has no defined powers regarding the enforcement of privacy.

This creates a fragmented institutional landscape where:

1. Authorities lack clear jurisdiction over privacy violations
2. Companies face minimal compliance guidance
3. Individuals struggle to understand or enforce their rights

The Movistar and Cashea incidents highlight how this fragmentation translates into practical impunity following major data exposures.

‍

What’s Next? A Legal Opportunity for Reform

‍

The repercussions of insufficient safeguards for data protection extend past the damage incurred to a person's privacy:

1. Loss of trust in both financial and digital services
2. Heightened likelihood of financial fraud and crime
3. Lack of willingness from foreign companies to conduct business with Venezuela’s platforms.
4. Long-term negative impact on the reputation of domestic companies.
5. Possible inability to access cross-border transfer of data due to other jurisdictions’ decisions to restrict transfers into jurisdictions without cutting-edge enforcement of protections for privacy.

In a digital economy that increasingly requires robust data protection to function successfully, a lack of action to create strong protections will cause a significant economic impact.

‍

Conclusion

‍

Major data breaches such as the ones at Movistar in 2025 and Cashea App in 2026 show that constitutional privacy rights alone are insufficient without enforceable legal framework. Privacy laws must move from being just a principle to being a law that has institutions, procedures, and accountability to make sure the privacy of the users is protected.

Now with the global digital economy being so interconnected, not having regulations creates openings for vulnerabilities for people. If Venezuela hopes to protect their citizens, create an innovation-friendly environment, and compete in the global market, they must implement comprehensive data privacy reforms as soon as possible.

‍

REFERENCES 

‍

1. https://iapp.org/news/a/venezuela-data-breach-highlights-scattered-privacy-regulation
2. https://www.apolocybersecurity.com/en/blog-posts/ciberataque-a-movistar-que-ha-pasado-a-quien-afecta-y-como-proteger-tus-datos
3. https://darknetsearch.com/knowledge/news/en/cashea-app-data-leak-79m-records-exposed-in-venezuela/
4. https://www.binance.com/en-IN/square/post/294369884695410

‍

Introduction

Social media has become integral to our lives and livelihood in today’s digital world. Influencers are now strong people who shape trends, views, and consumer behaviour. Influencers have become targets for bad actors aiming to abuse their fame due to their significant internet presence. Unfortunately, account hacking has grown frequently, with significant ramifications for influencers and their followers. Furthermore, the emergence of social media platforms in recent years has opened the way for influencer culture. Influencers exert power over their followers’ ideas, lifestyle choices, and purchase decisions. Influencers and brands frequently collaborate to exploit their reach, resulting in a mutually beneficial environment. As a result, the value of influencer accounts has risen dramatically, attracting the attention of hackers trying to abuse their potential for financial gain or personal advantage.

Instances of recent attacks

Places of worship

The hackers have targeted renowned temples for fulfilling their malicious activities the recent attack happened on The Khautji Shyam Temple, a famous religious institution with enormous cultural and spiritual value for its adherents. It serves as a place of worship, community events, and numerous religious activities. However, since technology has invaded all sectors of life, the temple’s online presence has developed, giving worshippers access to information, virtual darshans (holy viewings), and interactive forums. Unfortunately, this digital growth has also rendered the shrine vulnerable to cyber threats. The hackers hacked the Facebook page twice in the month, demanded donations and hacked the cheques the devotes gave to the trust. The second event happened by posting objectional images on the page and hurting the sentiments of the devotees. The Committee of the temple has filed an FIR under various charges and is also seeking help from the cyber cell.

Social media Influencers

Influencers enjoy a vast online following worldwide, but their presence is limited to the digital space. Hence every video, photo is of importance to them. An incident took place with leading news anchor and reporter Barkha Dutt, where in her youtube channel was hacked into, and all the posts made from the channel were deleted. The hackers also replaced the channel’s logo with Tesla and were streaming a live video on the channel featuring Elon Musk. A similar incident was reported by influencer Tanmay Bhatt, who also lost all the content e had posted on his channel. The hackers use the following methods to con social media influencers:

• Social engineering
• Phishing
• Brute Force Attacks

Such attacks on influencers can cause harm to their reputation, can also cause financial loss, and even lose the trust of the viewers or the followers who follow them, thus further impacting the collaborations.

Safeguards

Social media influencers need to be very careful about their cyber security as their prominent presence is in the online world. The influencers from different platforms should practice the following safeguards to protect themselves and their content better online

Secure your accounts

Protecting your accounts with passphrases or strong passwords is the first step. The best strategy for doing this is to create a passphrase, a phrase only you know. We advise choosing a passphrase with at least four words and 15 characters.

To further secure your accounts, you must enable multi-factor authentication in the second step.

To access your account, a hacker must guess your password and provide a second authentication factor (such as a face scan or fingerprint) that matches yours.

Be careful about who has access

Many social media influencers collaborate with a team to help generate and post content while building their personal brands.

This entails using team members who can write and produce material that influencers can share themselves, according to some of them. In these situations, the influencer is the only person who still has access to the account.

There are more potential weak spots when more people have access. Additionally, it increases the number of ways a password or account access could fall into the hands of a cybercriminal. Only some staff members will be as cautious about password security as you may be.

Stay up-to-date on the threats

What’s the most significant way to combat threats to computer security? Information.

Cybercriminals constantly adapt their methods. It’s crucial to stay informed about these threats and how they can be utilised against you.

But it’s not just threats. Social media platforms and other service providers are likewise changing their offerings to avoid these challenges.

Educate yourself to protect yourself. You can keep one step ahead of the hazards that cybercriminals offer by continuously educating yourself.

Preach cybersecurity

As influencers, cyber security should be preached, no matter your agenda.

This will also enable users to inculcate best practices for digital hygiene.

This will also boost the reporting numbers and increase population awareness, thus eradicating such bad actors from our cyberspace.

Acknowledge the risks

Keeping a blind eye will always hurt the safety aspects, as ignorance always causes issues.

Risks should be kept in mind while creating the digital routine and netiquette

Always inform your users of risk existing and potential risks

Monitor threats

After the acknowledgement, it is essential to monitor threats.

Active lookout for threats will allow you to understand the modus Operandi and the vulnerabilities to avoid criminals

Threats monitoring is also a basic netizens’ responsibility to ensure that the threats are reported as they emerge.

Interpret the data

All cyber nodal agencies release data and trends of cybercrimes, understand the trends and protect your vulnerabilities.

Data interpretation can lead to an early flagging of threats and issues, thus protecting the cyber ecosystem by and large.

Create risk profiles

All influencers should create risk profiles and backup profiles.

This will also help protect one’s data as it can be stored on different profiles.

Risk profiles and having a private profile are essential to safeguard the basic cyber interests of an influencer.

Conclusion

As we go deeper into the digital age, we see more technologies emerging, but along with them, we see a new generation of cyber threats and challenges. The physical, as well as the cyberspace, is now inter twinned and interdependent. Practising basic cyber security practices, hygiene, netiquette, and monitoring best practices will go a long way in protecting the online interests of the Influencers and will impact their followers to engage in best practices thus safeguarding the cyber ecosystem at large.

Introduction

The war over children and social media, once mostly waged in headlines, committee hearings, and video clips of executives begging apologies from distraught families, has officially reached to courts. This past Monday, August 26, 2026, Meta reportedly agreed to settle for an estimated $18 billion for the sprawling, multi-state class action suit that accused the social media titan of intentionally designing Instagram and Facebook to be addictive for children and of actively failing to shield them from child abuse imagery, disordered eating websites and much more. This record $18 billion, one of the largest ever obtained against a consumer-facing business, occurred just over a week into a high-profile trial in Oakland, in which four states pursued nearly $1.4 trillion in damages against Meta. Even more important than the headline figure, though, is what actually lies in the fine print (or what the settlement leaves distinctly out): the future of teen safety law.

What Meta agreed to pay  and to whom

The settlement resolves claims brought jointly by 29 states in 2023, which eventually grew into a coalition of 47 states, the District of Columbia, and several U.S. territories. Just over $17 billion goes toward that multistate case, with the remainder settling claims from other states. Notably, three states, Texas, New Mexico, and Florida, settled separately. Texas alone secured over $1 billion, on top of the $1.4 billion Meta paid the state in 2024 over biometric data misuse. New Mexico had already won its own jury trial in March 2026, when jurors found Meta violated the state's consumer protection law and ordered a $375 million penalty; a judge later added further penalties, pushing that case's total past $560 million.

Under the multistate deal, there's a revealing structural detail: Meta will hand over only 70% of the total (about $12.7 billion) unless TikTok and YouTube also agree to adopt matching safety measures, daily time limits, night mode, and age assurance tools. The remaining 30% ($5.3 billion) is contingent on rivals falling in line and paying comparable sums. In other words, Meta is using its own settlement as leverage to drag competitors into the same regulatory box, a move Meta's chief legal officer, C.J. Mahoney, framed as setting "the right path forward for our whole industry".

Changes made by the Platform

Beyond the check, Meta has committed to a list of design changes for teen accounts:

• A default two-hour daily screen-time limit, with prompts every 15 minutes encouraging "intentional use"
• Accounts that Meta flags belonging to minors will be blocked from the apps overnight (midnight–6 a.m.)
• Notifications muted during school hours (8 a.m.–3 p.m.)
• Teens will no longer see "like" counts on their own or others' posts by default
• Continued investment in AI-driven age-detection technology — the "adult classifier" system Meta has been building since 2021, which scans behavioral signals (who you follow, what you engage with, even "happy birthday" posts) to guess whether an account belongs to a minor, regardless of the birthday entered at signup

Meta has also publicly called on app stores to shoulder more of the age-verification burden themselves, a signal that the next legal battleground may shift from the apps themselves to the operating systems and stores that distribute them.

Why critics say the "money machine" walks away largely intact

Here is the uncomfortable arithmetic several legal analysts have pointed out: Meta's $18 billion is being paid out over 10 years, against a company whose 2025 revenue exceeded $200 billion. As one technology litigator told TechCrunch, spreading the payment over a decade "really does blunt the financial impact of the large number". Meta did not admit wrongdoing. No executive faces personal liability. And crucially, the design changes Meta agreed to are largely features it had already begun rolling out voluntarily: teen accounts, PG-13 content defaults, and AI age detection, meaning the settlement in some ways ratifies Meta's existing roadmap rather than forcing a fundamentally different business model. Child-safety advocates have voiced similar scepticism. As one advocacy group leader put it around Meta's earlier safety announcements, such moves are as much about managing the narrative as they are about substantive protection.

Work in Progress

Perhaps the most important vulnerability in the settlement is this: nearly every protection Meta's promise depends on accurately knowing who is a teenager. Age-verification and age-prediction technology remains genuinely unreliable. Meta itself has never disclosed hard accuracy figures for its AI "adult classifier", and outside researchers have long warned that both self-declared birthdates and AI inference are trivially gamed by tech-savvy teens — and prone to misclassifying adults. If the underlying age-detection layer is porous, the two-hour limits, overnight blackouts, and muted like counts are protections that exist only for the users who show up to be counted.

Why this case is really about digital ID

This is where the story stops being just a corporate-liability story and becomes a civil-liberties one. The original complaint from California, Colorado, Kentucky, and New Jersey explicitly asked the court to compel Meta to implement "multi-layered age verification at account sign-up" going beyond birthdates to methods like submitting student IDs. As digital-rights outlet Reclaim The Net has argued, verifying that some users are minors necessarily means putting every user through an identity check because the system can't know who's underage without checking everyone. That's the quiet trade-off sitting inside nearly every child-safety proposal now moving through state legislatures and courts: protecting kids online, as currently conceived by regulators, increasingly means asking adults to prove who they are just to open an app.

Judge Yvonne Gonzalez Rogers, who is overseeing the underlying federal case, took the unusual step of empanelling an advisory jury to weigh in on specific factual questions even as settlement talks proceeded, which is a sign that courts are trying to build a durable evidentiary record regardless of how individual cases resolve. That record, which is an unsealed internal research, executive testimony, and coroners' findings cited in court filings  is exactly the kind of material state and federal lawmakers will cite for years as they draft the next generation of age-verification and social media laws.

Conclusion

The Meta settlement is unlikely to be the last of its kind. Thousands of similar lawsuits from families, school districts, and other states remain active, and the California bellwether trial's findings will likely shape settlement math for TikTok, YouTube, and Snap. Expect three parallel tracks to accelerate: state legislatures pushing app-store-level age verification; plaintiffs' lawyers using unsealed Meta documents as templates for the next wave of suits; and Meta itself continuing to invest in AI-based age detection partly to protect teens and partly to insulate itself from the next $18 billion bill. Whether that technology can be built without turning every internet user into someone who has to prove their age at the door is the legal and technological question that will define this fight for the next decade.

Sources

• Meta settles landmark state child harm claims for $18 billion – CNN Business
• Meta's $18B child-safety deal hinges on age-verification tech that doesn't work well – TechCrunch
• Meta to pay 47 states up to $17.1B in landmark child safety settlement – Stateline
• Meta's $18bn settlement: How social platforms will change for child users – Al Jazeera
• Meta to pay Texas $1 billion in child safety case – The Texas Tribune
• Meta Trial Opens as States Demand Age Verification – Reclaim The Net
• States' complaint against Meta (PDF) – Reclaim The Net document archive
• Jury finds Meta's platforms harmful to children in first wave of lawsuits – PBS NewsHour / AP
• Instagram's AI-based teen account detection – TechCrunch

‍