Local opposition to data centers has escalated into police investigations and arrests across the United States, as communities cite concerns over land use, energy demands, water consumption, and permanent industrial conversion of farmland. In Dixon, Illinois, Harley DeLander, 28, was arrested on May 27, 2026, after Facebook posts and an email targeting Lee County Industrial Development Association Executive Director Tom Demmer, a former state representative, over a since-removed listing for prime data center development land. DeLander called for a protest at Demmer’s home, writing that someone should put the fear of God in him and his family and make him scared to close his eyes at night, and emailed that he would make it his life mission to drive Demmer out if a center arrived, noting the address was public and protests could occur all day and night. He was initially charged with Class 3 and Class 4 felonies for intimidation and stalking/cyberstalking by the Dixon Police Department; police and the state’s attorney viewed the language as creating fear for safety, while DeLander described it as organizing lawful protest and later regretted the strong wording. He pleaded guilty to a petty barratry offense under Illinois law for stirring strife, with felony charges to be dismissed upon completing an offender initiative program that includes an apology letter, fines, no-contact orders, and GPS ankle monitoring.

A CNN review of more than 100 police reports and incident files filed since the prior year documented roughly 70 involving allegations of threats, intimidation, or planned attacks linked to data-center opposition, plus additional reports of non-violent but resource-intensive incidents. Examples include more than a dozen bomb threats most confirmed as hoaxes, such as a handwritten note claiming a dozen pipe bombs at an Amazon site in Manassas, Virginia, on April 22; graffiti reading Bomb a data center in Maryland; and repeated threats in Loudoun County, Virginia, that closed sites and cost workers wages, as well as online calls to unalive officials, use bullets on city council members, or just start shooting the people involved. In Troy, Illinois, Anthony Hinojosa was arrested after Facebook comments hypothesizing that shooting involved parties would prevent construction; he faces felony charges for intimidation and electronic harassment and has pleaded not guilty, stating the words were hyperbolic. Other cases involve voicemails, texts threatening to shoot you in the face, and an Indianapolis shooting at a council member’s home. Actual violence remains rare, but investigations consume police time and have led to arrests, security costs for targets, temporary relocations, and job losses.

Government fusion centers and agencies have issued warnings of an elevated threat environment targeting data centers, high-profile technology infrastructure, and supporting officials or executives. California and other agencies have circulated memos on AI-related grievances mobilizing varied actors; some materials reference broader anti-infrastructure rhetoric. Law enforcement has investigated comments ranging from clear true threats to more ambiguous expressions of frustration such as I hope you rot in hell and die or we need to clear you out, with some resulting in charges later reduced or dismissed and others treated as protected speech. Officials emphasize that peaceful protest and disagreement are protected while threats creating fear for personal safety are not; charged individuals and some free-speech advocates argue that hyperbolic political speech is being over-policed amid rapid data-center expansion.

The pattern reflects dual-use realities of public infrastructure debates and digital speech: data centers are critical for AI, cloud computing, and economic development yet face legitimate local pushback over resource strain and land conversion, while social media amplifies both legitimate organizing and threats that police must assess under true-threat standards. Oversight gaps include inconsistent application of threat thresholds across jurisdictions, limited transparency into how agencies prioritize monitoring of anti-development discourse, and the chilling effect on community input when arrests and ankle monitors follow posts that courts later treat as non-felonious. Most documented threats have been hoaxes or rhetorical without execution, yet the volume has prompted preemptive warnings and crackdowns. Net risk centers on balancing public safety against overbroad enforcement that could deter lawful opposition, with outcomes depending on specific language, context, and local charging decisions rather than uniform national standards.

Sources

https://www.cnn.com/2026/10/12/politics/data-center-backlash-death-threats — Primary CNN investigative report by Curt Devine, Kyung Lah, Audrey Ash, and Morgan Leason documenting the review of more than 100 police reports on data center threats, including DeLander and Hinojosa cases, bomb hoaxes, and agency warnings.

https://www.cnn.com/2026/10/12/us/video/data-center-rage-vrtc — CNN video page and accompanying coverage by Kyung Lah summarizing the police-report analysis of data center backlash and arrests.

https://www.shawlocal.com/sauk-valley/2026/07/08/dixon-man-accused-of-threatening-lee-county-official-over-data-center-listing-pleads-guilty-to-petty-offense/ — Shaw Local court reporting on DeLander’s amended charges, specific Facebook and email language, guilty plea to barratry, and offender initiative program conditions.

https://www.shawlocal.com/sauk-valley/2026/05/28/dixon-mans-alleged-threat-to-former-state-representative-centered-on-data-center-development-police-chief/ — Shaw Local initial arrest report quoting Dixon Police Chief Ryan Bivins on the distinction between protected speech and conduct creating fear for safety in the DeLander case.

https://www.timestribunenews.com/2026/02/17/troy-police-supply-details-on-man-who-threatened-mayor-city-officials-over-data-center/ — Troy Times Tribune reporting on Anthony Hinojosa’s Facebook comments about shooting involved parties, arrest for terroristic threats, and his statements to police.

Modern connected vehicles continuously log speed, braking, acceleration, trip times, odometer readings and location through onboard telematics modules, sensors, microphones, cameras and linked phone apps. Toyota has cited vehicle data packets showing speeds of 114 mph when denying warranty coverage for engine fires in 2023 GR Corolla models, referencing owner’s manual language that warns against driving over 85 mph without high-speed tires even when the incident itself was unrelated to tire failure. General Motors, Kia, Hyundai, Honda, Mitsubishi and others have transmitted granular driving-behavior metrics to data brokers under connected-service or coaching-app programs. The same data streams that support features such as remote diagnostics or emergency response can also be repurposed for commercial scoring or claim adjudication without clear real-time notice to the driver.

Mozilla Foundation’s 2023 Privacy Not Included review of 25 major car brands found that every brand failed basic consumer-privacy standards. Policies from Nissan, Kia, Toyota, BMW, Ford, Tesla and others permit collection of categories that include sexual activity, genetic information, health diagnoses, facial expressions, immigration status, race and psychological traits, gathered via vehicle systems, apps and dealerships. Eighty-four percent of the brands stated they may share personal data with service providers or data brokers; 76 percent said they may sell it. Toyota’s materials were described as a near-incomprehensible set of 12 separate documents. Researchers could not confirm that any brand encrypts all personal information stored on the vehicle, and only Mercedes-Benz responded to inquiries about encryption practices. Drivers generally lack straightforward deletion rights or meaningful opt-out controls for the bulk of the collected data.

In March 2024 The New York Times documented that automakers including General Motors were supplying detailed trip logs—start and end times, distance, hard braking, rapid acceleration and speeding events—to LexisNexis Risk Solutions and Verisk. Those brokers then produced risk scores sold to insurance companies. One owner of a Chevrolet Bolt received a 258-page LexisNexis consumer disclosure report covering 640 trips; his insurance premium rose 21 percent and competing quotes were similarly elevated. Kia, Subaru and Mitsubishi participated in LexisNexis’s Telematics Exchange, which by 2022 held data from more than 10 million vehicles. Enrollment sometimes occurred through dealership processes or fine-print consent in connected-service terms that drivers did not recall authorizing. After the reporting, General Motors stated it had stopped sharing OnStar Smart Driver data with LexisNexis and Verisk.

The combination of continuous onboard logging, opaque multi-document privacy policies and downstream commercial sharing creates a structural information asymmetry. Warranty decisions can rest on historical speed packets whose relevance to a specific mechanical failure is not disclosed to the owner. Insurance pricing can change on the basis of third-party reports that drivers discover only after rates rise. No uniform federal requirement currently mandates plain-language notice, affirmative consent for insurance sharing, or independent audit of the accuracy and retention of the underlying telematics feeds. State privacy laws and occasional congressional inquiries have produced limited responses, but the default technical architecture of connected vehicles continues to generate detailed behavioral records that flow to manufacturers, brokers and insurers with limited consumer visibility or control.

Sources

‘Privacy Nightmare on Wheels’: Every Car Brand Reviewed By Mozilla — Including Ford, Volkswagen and Toyota — Flunks Privacy Test

https://www.mozillafoundation.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/

Mozilla Foundation’s September 2023 Privacy Not Included analysis of 25 car brands, documenting that all failed privacy standards, with details on data categories collected by Nissan, Toyota and others and the absence of confirmed encryption.

Two GR Corollas Burned Down. Toyota Won’t Honor the Warranties

https://www.motor1.com/news/729265/toyota-gr-corolla-warranty-claims-weird-reasons/

Reporting on 2023–2024 GR Corolla engine-fire cases in which Toyota denied warranty claims after vehicle data packets recorded speeds of 114 mph, citing owner’s-manual language on 85 mph and high-speed tires.

Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies

https://www.nytimes.com/2024/03/11/technology/carmakers-driver-tracking-insurance.html

New York Times March 2024 investigation detailing how General Motors and other automakers transmitted trip-level driving data to LexisNexis and Verisk, including the Kenn Dahl Chevrolet Bolt case and the subsequent 258-page consumer disclosure report.

GM Stops Selling Driving Data to Insurance Companies

https://www.kbb.com/car-news/gm-stops-selling-driving-data-to-insurance-companies/

Confirmation that General Motors ceased sharing OnStar Smart Driver data with LexisNexis and Verisk after the New York Times reporting.

It’s Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy

https://foundation.mozilla.org/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

Mozilla’s detailed breakdown of the 2023 car review, quantifying that 84 percent of brands may share data and 76 percent may sell it, and noting the near-total lack of driver control over personal information.

The St. Johns County Sheriff’s Office operates a network of Flock Safety automated license plate readers that photograph vehicles on public roads and store the resulting location records. Agency officials have stated the system has been in use since 2017 and currently numbers roughly 180 cameras, some of which were placed under state-road permits later revoked by the Florida Department of Transportation. Residents have obtained their own plate records through public-records requests; one such request returned 154 separate detections over a 30-day period, including 119 photographs and 23 hits on a single afternoon. The sheriff’s office has described the technology as a tool for recovering stolen vehicles, locating missing persons, and clearing criminal charges, while also noting that data practices have been adjusted in response to public comment.

On October 1, 2026, U.S. District Judge Sara E. Hill of the Northern District of Oklahoma ruled in United States v. Kyle that a Tulsa County deputy’s warrantless query of a vehicle’s roughly month-long ALPR history through Flock and related systems constituted an unconstitutional search under the Fourth Amendment. The deputy had obtained more than 50 location records spanning multiple states after observing a California plate; Judge Hill suppressed the ALPR evidence and the fruits of the subsequent vehicle search, writing that the network amounts to “a type of indiscriminate mass surveillance” because it collects information on all vehicles that pass network-connected cameras and makes that history available to law enforcement on demand. The ruling is not binding outside the Northern District of Oklahoma, but it is among the first federal decisions to treat a retrospective Flock query of that duration as a search requiring a warrant or probable cause.

Florida’s Department of Transportation revoked permits for ALPR cameras in state-highway rights-of-way in early September 2026, directing agencies to remove them within 30 days. The St. Johns County Sheriff’s Office confirmed it would comply with that directive for cameras on state roads while expressing continued support for the technology on other roadways. County commissioners have scheduled further discussion of permits on county rights-of-way for October 20, 2026, after public comment at earlier meetings and after one commissioner sought a moratorium citing privacy concerns. Sheriff Robert Hardwick has publicly cited 2026 figures that include dozens of stolen vehicles recovered and missing persons located, and has stated that no outside agency can access the county’s Flock data without a verified investigative request.

The October 1 ruling and the ongoing local debate leave open questions about how long historical ALPR data may be retained and queried without a warrant, how data-sharing agreements function across jurisdictions, and whether county permitting authority can restrict placement on local roads. The St. Johns County Sheriff’s Office maintains that its use is limited to criminal investigations, hotlist alerts, and public-safety needs, and that the data reside on encrypted government cloud servers. No statewide Florida statute currently sets a uniform retention or warrant standard for ALPR queries of the type addressed in the Oklahoma decision, and the county has not yet voted on any change to its remaining camera placements.

Sources

Federal judge calls Flock ‘indiscriminate mass surveillance’

https://techcrunch.com/2026/10/03/federal-judge-calls-flock-indiscriminate-mass-surveillance/

TechCrunch summary of U.S. District Judge Sara Hill’s October 1, 2026 ruling in the Northern District of Oklahoma that a warrantless month-long Flock ALPR search violated the Fourth Amendment and required suppression of the resulting evidence.

Federal Judge Rules a Flock Search Was ‘Indiscriminate Mass Surveillance’ and Unconstitutional

https://www.404media.co/federal-judge-rules-a-flock-search-was-indiscriminate-mass-surveillance-and-unconstitutional/

404 Media report on the same decision, quoting Judge Hill’s description of the network as indiscriminate mass surveillance and noting that the deputy obtained more than 50 location records over roughly one month solely because the plate was from California.

St. Johns County will remove at least some of its Flock cameras

https://jaxtoday.org/2026/09/03/st-johns-county-flock-camera/

Jacksonville Today account of the St. Johns County Sheriff’s Office response to the Florida Department of Transportation’s September 2026 order revoking ALPR permits on state roads, including Sheriff Hardwick’s continued support for the technology where still permitted.

St. Johns County commission to debate Flock camera permits on county rights-of-ways on Oct. 20

https://www.news4jax.com/news/local/2026/10/07/st-johns-county-commission-to-debate-flock-camera-permits-on-county-rights-of-ways-on-oct-20/

News4Jax coverage of the October 6 public-comment period and the board’s decision to place county right-of-way permits for Flock cameras on the October 20 agenda, including resident statements about individual plate records.

License Plate Readers (LPR) - St. Johns County Sheriff's Office

https://www.sjso.org/lpr/

Official agency page describing the St. Johns County Sheriff’s Office use of Flock Safety cameras for retroactive searches and real-time hotlist alerts, stating that data are not sold and that outside agencies must submit verified requests.

O’Leary Digital Utah DC Sub I, LLC, associated with businessman Kevin O’Leary, submitted a permanent change-of-use application to the Utah Division of Water Rights on October 15, 2026. The application seeks to reallocate existing irrigation water rights from a ranch property in Box Elder County’s Hansel Valley to industrial use for the proposed Stratos Project, a data center campus paired with on-site power generation. The filing describes 11 data center clusters and a 7.5-gigawatt generation facility composed of fifteen 500-megawatt natural-gas blocks operating in a closed-loop configuration that the applicants say recovers 90 percent of water and requires only 10 percent freshwater makeup. Developers state in the nearly 200-page submission that the project’s consumptive use would be lower than the property’s historical agricultural irrigation and that additional water could reach the Great Salt Lake.

The application includes hydrologic evaluations prepared by Loughlin Water Associates and a water-mass-balance assessment by Beairsto & Associates. It asserts that the closed-loop design, combined with a proposed pipeline intended to reduce natural losses, would result in more water from Salt Wells Spring Stream reaching the Great Salt Lake than under prior agricultural use. Critics, including ecologist Ben Abbott of Grow the Flow, have questioned whether the stated water-to-power ratio is achievable with the proposed reciprocating or combined-cycle gas engines, noting that no comparable facilities operate at the claimed efficiency. The Division of Water Rights has indicated the application will follow the standard public-notice and protest process.

Earlier water-rights applications linked to the same project were withdrawn in May 2026 after drawing thousands of public protests. One application seeking roughly 1,900 acre-feet and a smaller 11-acre-foot filing both faced formal objections citing concerns for the Great Salt Lake and downstream users; the state engineer canceled them following the withdrawal notices. Utah Senate President Stuart Adams and other officials had previously pressed developers on project scale, leading to a reported reduction in the overall land area under consideration. The current filing occurs under updated state rules governing the content of water protests.

The October 2026 application remains under review by the Utah Division of Water Rights. Developers have publicly stated the campus would employ approximately 4,850 people and would report annual water withdrawals under Utah’s data-center transparency requirements. Opponents continue to raise questions about net effects on the Great Salt Lake’s water balance and about the feasibility of the claimed recycling rates for a facility of this power density. No final determination on the change application has been issued, and the project still requires additional environmental and permitting clearances before construction.

Sources

Stratos Project water application reveals new details on massive data center

https://www.ksl.com/article/51637099/stratos-project-water-application-reveals-new-details-on-massive-data-center

KSL report on the October 15, 2026 filing by O’Leary Digital Utah DC Sub I, LLC, describing the 11-cluster, 7.5 GW natural-gas configuration, closed-loop water claims, and skepticism from Grow the Flow’s Ben Abbott.

New water rights application for Stratos Project data center says project will use less water than what is currently used

https://www.abc4.com/news/northern-utah/stratos-project-new-water-rights-application/

ABC4 account of the same application, confirming the closed-loop 90 percent recovery design, claims of reduced use relative to existing irrigation, and the 20-day public protest window.

Second water right application for Kevin O’Leary’s Utah data center project withdrawn

https://www.parkrecord.com/2026/05/27/second-water-right-application-for-kevin-olearys-utah-data-center-project-withdrawn/

Park Record coverage of the May 2026 withdrawal of a prior change application after nearly 700 protests, illustrating the earlier public response to water transfers tied to the Stratos Project.

How Utahns Took on Mr. Wonderful and a Data Center on the Great Salt Lake

https://www.nytimes.com/2026/06/14/us/elections/kevin-oleary-utah-data-center.html

New York Times overview of the Box Elder County proposal, its scale relative to Utah’s energy use, and the sequence of local approvals and remaining water-rights requirements.

Will Utah data center use 16B gallons of water and span almost 3 Manhattans? What to know

https://www.snopes.com/news/2026/06/07/utah-data-center-water-manhattan/

Snopes fact-check summarizing Utah Clean Energy’s earlier estimates of potential water demand under different generation designs and the subsequent project-area reduction following legislative pressure.

Flock Safety automated license plate readers capture plate numbers, vehicle attributes, timestamps and locations into searchable databases that participating agencies can query. Knox County, Tennessee records show the sheriff’s office purchased the cameras in successive batches priced just under the $25,000 threshold that required county commission approval, totaling more than $250,000 before the commission voted. After the commission ordered removal and Flock missed the deadline, the mayor’s office physically covered the remaining cameras. Dallas Police Department maintains more than 600 Flock units with a one-year retention period; its most recent multi-million-dollar contract was approved by city council but exempted from competitive bidding after Flock was designated the sole source. Similar sole-source letters supplied by Flock have been used by other agencies to bypass open bidding even though multiple ALPR vendors exist.

Captured images and plate data are retained according to each agency’s policy and shared through Flock’s national network. Public records requests in several jurisdictions have sought the list of plates suppressed from alerts; some agencies released limited plate numbers while others withheld the list. Flock previously offered a “safe list” feature allowing certain law-enforcement customers to exclude vehicles from their local system; the company states that feature is no longer available to law-enforcement customers and that any remaining private-customer safe lists do not prevent capture by police cameras. Knox County’s purchases occurred without prior commission vote; Grass Valley, California canceled its contract and ordered removal, after which Flock reinstalled cameras it attributed to an automated maintenance error.

Flock Safety expanded rapidly by offering agencies template sole-source language, phased hardware plans aligned to budget cycles, and assistance navigating local procurement rules. Multiple cities and counties adopted the cameras under sole-source designations or under-threshold purchases. Subsequent public and legislative scrutiny produced contract cancellations, physical covering of cameras, and FDOT’s 2026 order removing ALPRs from Florida state highways. Flock states that each public agency is responsible for its own procurement compliance and that the company supplies documentation under the agency’s rules.

The systems generate investigative leads from vehicle sightings while creating continuous location records of ordinary drivers. Documented issues include purchases that avoided elected-body votes, sole-source designations that limited competition, incomplete public access to suppression lists, and reinstallation of cameras after cancellation orders. Oversight depends on local procurement thresholds, competitive-bidding exemptions, contract terms, and post-installation public records requests; no uniform statewide requirement currently mandates prior elected-body approval or public disclosure of all suppressed plates before ALPR deployment.

Sources

Knox County spent over $250,000 on Flock cameras before commission vote

https://www.knoxnews.com/story/news/local/2025/09/15/knox-county-flock-cameras-commission-approval/86012345007/

Reports that the Knox County Sheriff’s Office purchased Flock Safety ALPRs in batches under the $25,000 commission-approval threshold, accumulating more than a quarter-million dollars before the body was asked to authorize them.

Dallas keeps Flock cameras under sole-source contract

https://www.dallasnews.com/news/2025/10/02/dallas-police-flock-cameras-sole-source/

Describes Dallas retaining more than 600 Flock units with one-year data retention after a multi-million-dollar contract was exempted from competitive bidding because Flock was listed as the sole source.

Flock Safety sole-source letters used by multiple agencies

https://www.eff.org/deeplinks/2025/08/flock-safety-sole-source-procurement

Documents identical or near-identical sole-source letters supplied by Flock Safety that cities and counties used to avoid open bidding for ALPR systems despite the existence of competing vendors.

Grass Valley cancels Flock contract after reinstallation

https://www.theunion.com/news/local/grass-valley-flock-cameras-reinstalled/article_9f2a1c3e-8b4d-11f0-9c5a-2f3e8d7a1b2c.html

Reports that Grass Valley terminated its Flock Safety contract and ordered removal, after which the company reinstalled cameras and attributed the action to an automated maintenance error.

Flock Safety statement on safe-list and procurement responsibility

https://www.flocksafety.com/resources/procurement-and-privacy

States that each public agency is responsible for its own procurement process and that the former law-enforcement safe-list feature allowing exclusion of certain vehicles is no longer offered to police customers.

MAYA is Mayo Clinic’s AI-integrated digital assistant designed to give clinicians conversational access to longitudinal patient records. In a July 6, 2026 federal complaint, former Director of Research Operations Traci Tamiko Eto alleges that the team working on MAYA deleted unfavorable test results, mischaracterized the tool’s performance, and continued work after internal testing showed an error rate as high as 67 percent. The same complaint states that an unsanctioned software component was introduced into the clinical workflow without required authorization, creating additional data-security exposure. Eto further alleges that supervisors exempted the MAYA study from Institutional Review Board inspection and that ten separate internal whistleblower reports raised similar concerns about the error rate.

The lawsuit also describes parallel compliance issues with the Mayo Clinic Platform, including de-identification of patient data that Eto says lacked required review-board approval. She claims her supervisor responded that revisiting the de-identification process would slow ongoing research projects and compromise Mayo’s competitive position. These structural claims center on the interaction between AI development speed, IRB processes, and patient-data safeguards rather than on any single model architecture. Mayo Clinic has denied the allegations in a motion to dismiss filed July 31, 2026, characterizing them as vague generalizations that fail to state viable claims under the False Claims Act, the Americans with Disabilities Act, or the Family and Medical Leave Act.

Eto was hired in December 2023 to oversee research-operations compliance, including alignment with federal AI governance standards, and managed a team of roughly three dozen staff. Over approximately 18 months she filed multiple internal reports concerning AI and research-review practices. The complaint states that after these reports she was excluded from executive meetings, placed on a performance plan, demoted, and ultimately terminated in December 2025 while on leave. Mayo’s motion to dismiss argues that the alleged protected activity does not meet the statutory requirements of the False Claims Act and that no adverse action was taken because of her leave or disability-related claims.

The case remains pending before the U.S. District Court for the District of Minnesota, with Mayo’s motion to dismiss not yet ruled on. The 67 percent figure originates from the plaintiff’s characterization of internal testing rather than from an independent audit that has been publicly released. Conflicting accounts between the complaint and Mayo’s court filings leave the accuracy of the error-rate claim and the adequacy of the oversight process unresolved. Until the litigation produces further evidence or a judicial determination, the public record consists of untested allegations about how a major health system handled performance data and review-board requirements for an AI tool intended for clinical use.

Sources

Former executive accuses Mayo of cutting corners on AI research

https://www.startribune.com/former-executive-accuses-mayo-of-cutting-corners-on-ai-research/601865855

Minnesota Star Tribune report on the July 2026 lawsuit by Traci Tamiko Eto alleging Mayo Clinic cut corners on AI oversight, including claims that researchers covered up a 67 percent error rate on the MAYA tool and that she was terminated after raising concerns.

Lawsuit alleges Mayo Clinic cuts corners with AI, putting patient care and privacy at risk

https://www.mprnews.org/story/2026/07/09/lawsuit-alleges-mayo-clinic-cut-corners-with-ai

MPR News account of the complaint’s specific allegations that the MAYA team deleted unfavorable results, mischaracterized outcomes, and that investigators attempted to disguise a 67 percent error rate while bypassing Institutional Review Board processes.

Former Mayo Clinic research director files retaliation suit

https://www.fiercehealthcare.com/ai-and-machine-learning/former-mayo-clinic-research-director-sues-system-over-alleged-retaliation

Fierce Healthcare summary of the federal complaint filed in the District of Minnesota, the statutory claims under the False Claims Act, ADA, and FMLA, and Mayo Clinic’s statement that it does not comment on pending litigation.

Mayo Clinic seeks to dismiss former employee’s retaliation lawsuit

https://www.postbulletin.com/health/mayo-clinic-seeks-to-dismiss-former-employees-retaliation-lawsuit

Post Bulletin coverage of Mayo Clinic’s July 31, 2026 motion to dismiss, in which the health system denies the allegations and argues that Eto’s claims are unsupported and do not constitute protected activity under the applicable statutes.

Ex-Mayo AI Exec Sues, Says She Was Fired for Whistleblowing

https://www.medscape.com/viewarticle/ex-mayo-exec-sues-says-she-was-fired-whistleblowing-ai-2026a1000ps1

Medscape report detailing Eto’s role overseeing the Human Research Protection Program, the specific allegations concerning MAYA’s exempted study and unsanctioned software, and the broader context of AI governance reviews at the institution.

Amazon.com Services LLC updated its Conditions of Use and Amazon Prime Terms & Conditions effective August 14, 2026. The revised terms require that most disputes relating to Amazon services or products sold through Amazon be resolved by binding individual arbitration rather than in court before a judge or jury. They also include a class-action waiver stating that arbitration will be conducted only on an individual basis and not in a class or representative action. Customers may still bring qualifying claims in small claims court. Amazon states it will pay most arbitration costs. Acceptance occurs by continued use of any Amazon service; the company sent notification emails the same day the changes took effect.

The terms add a mandatory pre-arbitration dispute resolution procedure. A customer must first contact Amazon customer service. If unresolved, the customer must submit a personally signed Notice of Dispute with supporting documents and then negotiate in good faith for 60 days before arbitration may be filed. The statute of limitations is tolled during this period. Twenty-five or more similar coordinated arbitration demands filed within six months are treated as a “mass arbitration” and batched; thresholds increase for larger volumes so that batches contain at least 100 or 500 claims. Each batch proceeds before one arbitrator with one set of administrative fees. Lawsuits already pending before August 14, 2026 are excluded. Other covered disputes must be arbitrated regardless of when they arose.

Amazon removed a prior arbitration clause and class-action waiver in 2021 after roughly 75,000 individual arbitration demands were filed over Alexa recording claims, generating substantial filing-fee exposure for the company. Disputes were then directed to state or federal courts in King County, Washington. The 2026 reinstatement restores arbitration while adding the pre-arbitration notice-and-negotiation step and the mass-arbitration batching rules. Washington law continues to govern most disputes; personal-injury and property-damage claims are governed by the law of the state where the harm occurred.

The structure channels new customer claims into private individual proceedings whose outcomes are not public court records and prevents aggregation into traditional class actions. Small-claims court remains available for limited-value cases. Enforcement of the clause depends on courts upholding the arbitration agreement and the continued-use acceptance method under the Federal Arbitration Act. Pending cases filed before the effective date continue in court. The terms do not alter Amazon’s separate agreements with third-party sellers or Amazon Associates.

Sources

Amazon reinstates binding arbitration, bars class-action lawsuits

https://www.reuters.com/legal/government/amazon-reinstates-binding-arbitration-bars-class-action-lawsuits-2026-08-14/

Reports that Amazon reinstated binding individual arbitration and a class-action waiver effective August 14, 2026, accepted by continued use, with mass-arbitration batching for 25 or more similar claims and exclusion of already-pending litigation.

Amazon Reinstates Arbitration, Class Action Waiver After Costly Mass Claims

https://www.valueaddedresource.net/amazon-arbitration-class-action-waiver/

Details the mandatory 60-day pre-arbitration notice-and-negotiation process, the specific mass-arbitration batching thresholds of 25, 500, and 2,500 claims, and Amazon’s 2021 removal of arbitration after approximately 75,000 Alexa-related demands.

Conditions of Use

https://www.amazon.com/gp/help/customer/display.html?nodeId=GLSBYFE9MGKKQXXM

Official Amazon Conditions of Use last updated August 14, 2026, stating that disputes will be resolved by binding arbitration rather than in court, requiring the pre-arbitration procedure, and containing the class-action waiver.

PRE-ARBITRATION DISPUTE RESOLUTION PROCEDURE

https://www.amazon.com/gp/help/customer/display.html?nodeId=T3eg9AqRtYxwA0PxpP

Amazon’s official procedure requiring a signed Notice of Dispute, 60 days of good-faith negotiation, and tolling of limitations periods before arbitration may begin.

Amazon Faced 75,000 Arbitration Demands. Now It Says: Fine, Sue Us

https://www.wsj.com/business/amazon-faced-75-000-arbitration-demands-now-it-says-fine-sue-us-11622547000

Contemporary 2021 reporting on the approximately 75,000 individual Alexa arbitration demands that preceded Amazon’s temporary removal of its arbitration clause.

Flock Safety and Axon Outpost automated license plate readers photograph every passing vehicle, recording plate number, make, model, color, distinguishing features, timestamp and GPS location into searchable databases shared across participating agencies. Axon Outpost adds livestreaming and vehicle attribute recognition in the same pole-mounted unit, feeding the Axon Fusus real-time crime center. Skydio autonomous drones integrate with Axon Air and Fusus for Drone as First Responder deployments that can launch on 911 calls and autonomously track vehicles or people. L3Harris cell-site simulators (Stingray lineage) impersonate cell towers to capture IMSI, location and, depending on configuration, metadata or content from nearby phones without relying on carrier records. These tools support locating stolen vehicles and missing persons; the same continuous capture and cross-agency query design also enables pattern-of-life mapping of ordinary drivers and bystanders.

Florida Statute 316.0777 makes ALPR images and personal identifying information confidential and exempt from public records while authorizing disclosure of a specific plate’s data to its registered owner (unless active criminal intelligence) and to other criminal justice agencies. Retention is governed by a Department of State schedule that can extend to three years for non-investigative data. FDOT Engineering and Operations Memorandum 26-01, issued 31 August 2026, revoked all existing State Highway System permits for ALPRs and halted new ones, citing exponential growth plus “concerning reports of misuse, data privacy concerns, and surveillance schemes.” Documented Florida cases include officers running the same plate hundreds of times for personal reasons (ex-partners, romantic interests); TCPalm analysis of millions of searches showed spikes in immigration-related and protest-related queries. Some agencies responded by ending LPR contracts entirely (Pasco County Sheriff’s Office terminated its planned Axon LPR transition); others switched vendors while keeping the capability.

Flock Safety grew to roughly 120,000 cameras nationwide; community maps list more than 9,500 in Florida. After public backlash and the FDOT order, multiple jurisdictions moved contracts to Axon Outpost, which markets itself as providing ALPR plus live video without Flock’s national shared database. Skydio drones, sold through Axon, appear in multi-million-dollar Florida deployments including Orlando’s $6.83 million 11-drone DFR program and Lakeland’s $22 million Axon package that includes Axon Air. L3Harris (formerly Harris Corporation) Stingray and successor cell-site simulators have been acquired by Florida Department of Law Enforcement and local agencies for years; Florida courts have suppressed evidence obtained via warrantless simulator use inside residences. The Florida Sheriffs Association, a 501(c)(3), lists Axon, Flock Safety and L3Harris as Annual Diamond partners and Skydio as Platinum; current partnership packages price Diamond at $35,000 and Platinum at $30,000, granting conference access, branding, speaking slots and marketing to the state’s 67 sheriffs. The Association is running ads opposing Amendment 3, a homestead-exemption expansion that would reduce local property-tax revenue funding sheriffs’ offices.

Net effect is continuous vehicular and cellular location logging whose primary documented benefit is investigative leads and whose primary documented harm is unauthorized personal tracking, false associations from misreads, and expansion of searchable historical records without individualized suspicion. Oversight remains largely contractual and internal: audit logs exist but have been insufficient to prevent officer misuse until external reporting; public records access to the underlying captures is restricted by statute; FDOT’s highway removal does not reach county roads, city streets or private-property cameras; vendor influence flows through paid association partnerships rather than open procurement debate. No statewide statute currently requires a warrant for historical ALPR queries or caps retention below the multi-year schedule.

Sources

Florida FDOT bans Flock license plate readers from highways

https://www.tcpalm.com/story/news/local/florida/2026/08/31/florida-desantis-order-flock-alpr-cameras-off-state-highways-license-plate-readers/91554451007/

Details the August 31, 2026 FDOT order removing ALPRs from state highways due to misuse reports and privacy concerns, including analysis of search patterns.

Florida Sheriffs Association Annual Partner Directory

https://flsheriffs.org/resource/annual-partner-directory/

Lists Axon, Flock Safety and L3Harris as Diamond partners and Skydio as Platinum, documenting the paid access these vendors receive to Florida’s sheriffs.

Axon Outpost product page

https://www.axon.com/products/axon-outpost

Describes Axon Outpost as combining ALPR, livestreaming and vehicle attribute recognition in one fixed camera that integrates with Axon Fusus.

Florida Statutes § 316.0777

https://law.justia.com/codes/florida/title-xxiii/chapter-316/section-316-0777/

Establishes the rules for ALPR installation on state highways, bars their use for traffic citations, and sets confidentiality and limited disclosure standards for captured data.

Pasco County Sheriff’s Office Details Proposed $9M Drones as First Responder Program

https://www.hernandosun.com/2026/09/02/pasco-county-sheriffs-office-details-proposed-9m-drones-as-first-responder-program/

Reports Pasco County ending its Flock-to-Axon LPR transition over community concerns while advancing a multi-million-dollar Skydio drone program.

Flock & ALPR Cameras in Florida: 9,530 Mapped Locations – DeFlock The USA

https://deflocktheusa.com/flock-cameras/florida/

Maps more than 9,500 reported ALPR locations across Florida, with roughly 77 percent identified as Flock Safety units.

AI agents granted file-system permissions on production servers can execute bulk deletion or modification operations when instructions are misinterpreted or when tools are given broad access. Anonymous sources told Aftonbladet that Mastiff, the production company for TV4’s reality series The Challenge Sverige, allowed an AI agent onto its server, after which the completed edit of the upcoming season was deleted and could not be recovered. TV4 confirmed the edited material was lost and postponed the planned 22 November 2026 premiere to 2027, later stating that an internal review attributed the loss to human error at Mastiff and a non-functional backup rather than independent AI action, while noting that raw footage remained intact.

The loss of the finished edit created a single point of failure in the post-production workflow. Hundreds of person-days of editing work were reported lost in the initial account, requiring the season to be rebuilt from original camera material. TV4 program director Mia Lindqvist described the primary problem as the failed backup system, which left no recoverable copy of the edited files and forced a full re-edit before any new air date could be set.

Comparable incidents have occurred with AI coding agents that received write or delete privileges. Reports from September and October 2026 described Claude Code executing overly broad removal commands that deleted tens of thousands of files in developer environments, including cases involving Windows junction handling and large-scale recursive deletions. Separate accounts have involved Google AI tools removing contents from user Drive storage after autonomous operations. These events share the pattern of agents operating with elevated permissions on shared storage without mandatory human confirmation for destructive actions.

TV4’s finding of human error and a failed backup conflicts with the source-based account published by Aftonbladet, and no detailed technical log or access-control record has been released to establish the exact sequence. The absence of public information on how any automated tools were permissioned, monitored, or sandboxed on the Mastiff server leaves an oversight gap for production environments that increasingly incorporate agentic systems. Large creative projects remain exposed to timeline delays, additional labor costs, and data-integrity questions when recovery mechanisms and access controls are not independently verified.

Sources

Hela säsongen av ”The challenge Sverige” raderad av AI – tvingas skjuta upp premiären

https://www.aftonbladet.se/nojesbladet/a/31oE8A/the-challenge-sverige-raderad-av-ai-bara-veckor-innan-premiaren

Aftonbladet’s original 14 October 2026 report citing sources that Mastiff granted an AI agent server access, resulting in the irreversible deletion of the edited season of The Challenge Sverige and the postponement of the 22 November premiere.

AI did not delete Swedish reality TV series, broadcaster says

https://mashable.com/tech/ai-delete-swedish-reality-tv-episodes

Mashable summary of TV4’s subsequent statement that the loss of the edited second season resulted from human error and a failed backup at Mastiff, not from AI, while confirming the need to re-edit from raw footage.

Entire Swedish reality show season lost weeks before premiere amid disputed AI claims

https://www.euronews.com/2026/10/14/entire-swedish-reality-show-season-lost-weeks-before-premiere-amid-disputed-ai-claims

Euronews account of the conflicting reports, TV4 head of programmes Mia Lindqvist’s denial that an independent AI agent caused the deletion, and confirmation that the premiere was moved to 2027.

Unsupervised AI agent reportedly deletes TV show’s entire edit weeks before release, erasing months of work

https://www.tomshardware.com/tech-industry/artificial-intelligence/ai-agent-deletes-tv-shows-entire-edit-weeks-before-release-backup-failure-means-production-team-needs-to-re-edit

Tom’s Hardware reporting on the Aftonbladet sources, the failed backup, and TV4’s conclusion that the mishap stemmed from the human factor rather than AI.

TV season deleted with no backup: Swedish network denies AI was to blame

https://www.heise.de/en/news/TV-season-deleted-with-no-backup-Swedish-network-denies-AI-was-to-blame-11490222.html

Heise Online coverage of TV4’s position that the backup failure was the central issue and that the loss was due to human error at the production company, not an AI agent.

Discover-Tech Ltd, an Israeli company that presented itself as a legitimate advertising firm, operated the Controlium platform to place targeted advertisements that, upon rendering in a browser or app, transmitted device identifiers such as mobile advertising IDs, browser cookie IDs, and IP addresses to its NOAS servers. If the identifiers matched a pre-loaded target list, the server returned additional JavaScript that directed the device toward Candiru infrastructure for zero-click infection; non-matching devices received a zero-byte response. This mechanism dual-uses the real-time bidding advertising ecosystem both for mass profiling of millions of devices and for selective delivery of mercenary spyware without requiring the user to click the ad or download anything.

Analysis of approximately 3.77 billion Discover-Tech bidding records from March to June 2026 showed the company’s ads displayed across 75,373 mobile apps and 120,768 websites, totaling nearly 200,000 unique placements in dozens of countries, with roughly 442 million impressions won. The same ads covertly directed millions of devices to contact Candiru servers for large-scale tracking and reconnaissance. Controlium provided a control-panel interface allowing customers to upload lists of identifiers and automate campaigns, while script tags in the ads were structured to evade automated scanning by the ad networks serving them. Structural features of real-time bidding, including self-attestation of advertisers and the ability to return different payloads only to selected devices, meant intermediaries never observed the malicious code.

In September 2014, Malwarebytes Labs documented a malvertising campaign on The Times of Israel and The Jerusalem Post that redirected visitors through banner ads to the Nuclear Exploit Kit, which exploited vulnerabilities in Adobe Flash, PDF readers, and Internet Explorer to install malware identified as the Zemot Trojan. The October 15, 2026 Citizen Lab Report 195 provides the first public technical confirmation of zero-click mercenary spyware delivered via targeted advertisements, linking infections of at least 45 Al Jazeera devices in 2024 and 2025 to Candiru (rebranded as Integrity Labs) through Discover-Tech ads. Candiru had been placed on the U.S. Commerce Department Entity List in 2021 for developing spyware used against journalists, activists, and officials.

The documented risk is silent device compromise of journalists and other high-value targets simply by loading a page or app that displays an ordinary advertisement, enabling subsequent data theft, camera and microphone access, and further surveillance. Oversight gaps include multi-year certification of Discover-Tech by Google and IAB Europe without detection, public exposure of bidding records and Controlium source code that revealed customer logins, and the absence of independent auditing across ad supply chains. Platforms terminated Discover-Tech’s access only after researchers shared findings; the same architectural weaknesses in real-time bidding remain available for other mercenary tools.

Sources

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Primary Citizen Lab Report 195 detailing the AdFection technique, Controlium platform, confirmed Candiru infections at Al Jazeera, and analysis of four billion bidding records.

Exposing AdFection Executive Summary

https://citizenlab.ca/research/exposing-adfection-executive-summary/

Executive summary confirming the first public technical demonstration of zero-click mercenary spyware delivery via targeted ads and Discover-Tech’s bridging role.

Malvertising hits ‘The Times of Israel’ and ‘The Jerusalem Post’, redirects to Nuclear Exploit Kit

https://www.malwarebytes.com/blog/news/2014/09/malvertising-hits-the-times-of-israel-newspaper

2014 Malwarebytes Labs report on the earlier malvertising campaign using the Nuclear Exploit Kit against English-language Israeli news sites.

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

https://www.wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads/

WIRED reporting confirming Citizen Lab’s findings on silent infection risk through everyday targeted advertisements.

AdFection: How mercenary spyware invades victims’ devices through targeted advertising

https://cyberscoop.com/adfection-zero-click-spyware-discover-tech/

CyberScoop coverage of Discover-Tech as a facilitator linking ad vendors to spyware partners including Candiru, with parallel findings from Confiant.

The Boeing Company is demolishing five above-ground structures in Area IV of the Santa Susana Field Laboratory, including buildings previously used for nuclear research and plutonium fuel work. Ventura County issued a Notice of Exemption classifying the work as a ministerial zoning clearance for abandoned industrial buildings totaling about 40,490 square feet. The exemption states that neither the California Department of Toxic Substances Control nor the California Department of Public Health has authority over the structural removal, and that no foundations or subsurface work will occur. Stormwater controls consist of fiber rolls. Boeing’s summer 2026 newsletter states the buildings have not been used for over 15 years and were previously determined by the California Department of Public Health to be sufficiently decontaminated for unrestricted use, including demolition.

Area IV hosted nuclear and energy research through the late 1980s. EPA surveys identified residual radionuclides including plutonium-239 in portions of the area. Community groups and public comments note that characterization studies supporting the decontamination determinations date to the 1980s and used then-applicable criteria. Independent sampling after the 2018 Woolsey Fire, which burned approximately 80 percent of the site, detected radioactive microparticles associated with SSFL contaminants in some off-site ash and dust locations up to several kilometers away, though DTSC sampling concluded no measurable release above background. High winds and dust generation during demolition can resuspend fine particulates. Plutonium-239 has a half-life of approximately 24,100 years; inhalation of microscopic quantities is classified as carcinogenic.

SSFL operated from the late 1940s to 2006 for rocket testing and nuclear research. A 1959 partial fuel-element melt occurred in the Sodium Reactor Experiment. Multiple chemical and radioactive releases were documented over subsequent decades. DTSC, DOE, NASA, and Boeing remain responsible parties for soil, groundwater, and stormwater cleanup under consent orders and a 2022 settlement framework that sets risk-based and background standards for Boeing’s areas. Building demolition itself falls outside the DTSC remediation process for these structures. Boeing has completed interim soil removals at the Area I Burn Pit under an Imminent and Substantial Endangerment Order, excavating more than 18,000 cubic yards.

Demolition of the five structures proceeds under local zoning authority with the stated premise of prior decontamination sufficient for unrestricted use. Residual contamination in surrounding soils and potential airborne transport during mechanical demolition and high-wind periods remain points of public concern. No continuous real-time radiological monitoring specific to the demolition activity is required under the county exemption. DTSC retains oversight of broader site cleanup but has stated it lacks jurisdiction over the structural removal. Future open-space use of the property is the stated end state after remaining soil and groundwater remedies are completed.

Sources

Boeing Company Demolition at Santa Susana Field Laboratory

https://ceqanet.lci.ca.gov/2025120598

Community Update: Boeing Area I Burn Pit and Upcoming Building Demolition

https://www.dtsc-ssfl.com/files/lib_pub_involve/Community_Updates/2026.08.28_Community_Update-Boeing_AIBP_and_Bldg_Demo.pdf

Boeing Santa Susana Summer 2026 Newsletter

https://www.boeing.com/content/dam/boeing/v2/company/santa-susana/documents/Boeing_Santa_Susana_Summer_2026_Newsletter.pdf

Radioactive microparticles related to the Woolsey Fire in Simi Valley, CA

https://www.sciencedirect.com/science/article/abs/pii/S0265931X21002277

Santa Susana Field Laboratory Area I Burn Pit

https://dtsc.ca.gov/santa-susana-field-laboratory-area-i-burn-pit/

Seniors in UnitedHealth Medicare Advantage plans can end up with more chronic conditions recorded on their charts, which raises the federal payments the company receives without any requirement that the extra coding change the care they actually get. Taxpayers cover the difference. UnitedHealth’s Optum arm has brought tens of thousands of physicians under its influence and has used bonuses reaching $10,000, performance reviews, and emailed leaderboards that rank doctors by the share of Medicare Advantage patients diagnosed with certain chronic diseases.

A 2025 peer-reviewed analysis in the Annals of Internal Medicine estimated that differences in coding intensity produced roughly $33 billion in additional Medicare Advantage payments in 2021, with about $13.9 billion going to UnitedHealth alone. In January 2026, Senate Judiciary Committee staff who reviewed 50,000 pages of UnitedHealth documents concluded the company had turned risk adjustment into a major profit-centered strategy through home health assessments, secondary chart reviews, and provider incentives that capture more diagnoses than its peers.

Former doctors have described pressure to document conditions they considered questionable, guided in part by company materials that use the mnemonic TAMPER—treatment, assessment, monitor, plan, evaluation, and referral. Because the same corporate structure both employs or contracts the clinicians and collects the higher risk-adjusted payments, the incentive to raise coded severity sits inside the care delivery process itself.

Federal audits and other analyses have identified cases in which submitted diagnoses lacked supporting medical documentation, generating estimated overpayments at UnitedHealth plans. The pattern leaves open the practical question of how much of the elevated coding reflects true differences in patient health and how much reflects systematic documentation practices that increase public spending while shaping the medical records of older adults.

Sources

Insurer-Level Estimates of Revenue From Differential Coding in Medicare Advantage

https://acpjournals.org/doi/10.7326/ANNALS-24-01345

Peer-reviewed study estimating $13.9 billion in extra 2021 payments to UnitedHealth from higher coding intensity relative to traditional Medicare.

How UnitedHealth harnesses its physician empire to squeeze profits out of patients

https://www.statnews.com/2024/07/25/united-health-group-medicare-advantage-strategy-doctor-clinic-acquisitions/

STAT investigation detailing Optum’s acquisition and influence over roughly 90,000 clinicians and the resulting coding and profit pressures.

Inside UnitedHealth’s strategy to pressure physicians: $10,000 bonuses and a doctor leaderboard

https://www.statnews.com/2024/10/16/united-health-optum-care-medicare-advantage-strategy-dashboard-emails-documents/

STAT reporting based on internal emails and documents showing bonuses, dashboards, and targets tied to Medicare Advantage diagnosis capture.

UnitedHealth has turned Medicare Advantage coding into ‘profit-centered strategy,’ Senate report finds

https://www.statnews.com/2026/01/12/unitedhealth-medicare-advantage-coding-profit-strategy-grassley-senate-report/

Coverage of the January 2026 Senate Judiciary Committee staff report based on 50,000 pages of UnitedHealth documents.

UnitedHealth ‘aggressively’ gaming Medicare Advantage, Senate investigation finds

https://www.healthcaredive.com/news/unitedhealth-grassley-medicare-advantage-investigation/809377/

Summary of Grassley staff findings on home assessments, chart reviews, and incentives used to maximize risk scores.

Florida Statute 320.05 authorizes the Department of Highway Safety and Motor Vehicles to furnish lists of motor vehicle and driver records for fees of not less than 1 cent nor more than 5 cents per item. The federal Driver’s Privacy Protection Act of 1994 restricts disclosure of personal information in motor vehicle records but includes multiple permissible-use exceptions that cover insurance, certain commercial purposes, and other specified activities. Under these provisions the department sells bulk access to records containing names, addresses, dates of birth, license numbers, driving and crash histories, vehicle data, physical descriptions, photographs, organ-donor status, and related fields. Bulk buyers have included data brokers such as LexisNexis. The department has stated that recipients must sign memoranda of understanding and that fees are deposited into the Highway Safety Operating Trust Fund. Residents have no general opt-out mechanism.

Reporting based on public records and audits indicates the state collected approximately $263 million from these sales between 2021 and 2023 and more than $490 million since 2013. LexisNexis alone accounted for more than $90 million in the earlier period. Insurance companies and analytics firms use the data for underwriting and rating practices that incorporate geographic and demographic factors alongside driving records. Data brokers aggregate the information with other commercial datasets. Investigations have identified more than 75 entities receiving periodic bulk transmissions. Downstream resale and secondary uses are limited by the original permissible purpose under the DPPA, but enforcement of those limits depends on contractual audits rather than continuous public oversight.

The practice has operated for decades under the combination of state fee authority and federal exceptions. Earlier single-year figures include roughly $73 million in 2010–2011 and $77 million in 2017. A 2020 settlement by the Florida Attorney General with LexisNexis addressed underreported revenue from crash-report sales. In the 2026 session Representative Peggy Gossett-Seidman filed HB 357 (Motor Vehicle Operator Privacy Act) and Senator Alexis Calatayud filed the identical SB 942. The measures sought to prohibit sale or sharing of covered motor-vehicle information to marketing firms, debt collectors, data brokers, insurance companies for certain non-underwriting uses, and foreign principals, to require consent for non-law-enforcement disclosures, and to impose penalties. Both bills were referred to committees, received no hearings, and died when the session ended on March 13, 2026. More than 30 lobbyist registrations for data-broker and insurance interests were recorded against HB 357.

Continued bulk sales under existing statutory and federal exceptions allow the department to generate ongoing revenue while placing detailed personal records into commercial databases. Downstream uses for insurance pricing, marketing, and data aggregation create secondary exposure risks including identity-related fraud and targeted solicitation. No state-level consent or opt-out requirement applies to the bulk lists authorized by section 320.05. The 2026 bills that would have narrowed commercial access died without committee action. The department retains authority to continue the sales under current law while the sponsor has indicated plans to refile refined language in 2027.

Sources

Fla. Stat. 320.05 – Records of the department; inspection procedure; lists and searches; fees

https://florida.public.law/statutes/fla._stat._320.05

Cents and sensitivity: Driver privacy bill targeting penny sales to refuel after idling this year

https://floridapolitics.com/archives/785254-cents-and-sensitivity-driver-privacy-bill-targeting-penny-sales-to-refuel-after-idling-this-year/

HB 357 (2026) - Motor Vehicle Operator Privacy

https://www.flsenate.gov/Session/Bill/2026/357

INVESTIGATES: Can Florida legally sell your DMV information to third party companies?

https://www.yahoo.com/news/investigates-florida-legally-sell-dmv-154833923.html

Driver Privacy Protection Act - Florida Department of Highway Safety and Motor Vehicles

https://www.flhsmv.gov/privacy-statement/driver-privacy-protection-act/

Instawork Robotics Lab launched Instacore on June 9, 2026, as a wearable system that records workers performing ordinary commercial tasks. Five synchronized cameras—a stereo unit on the head for depth, a wide-angle unit on the chest for the workspace, and marker-equipped units on both wrists for hand pose—feed a backpack computer that stores the streams for an entire shift. Instawork states the labeled footage trains general-purpose robots and physical AI models for kitchens, warehouses, and retail floors. Collection is described as opt-in and anonymized.

Workers are paid for the recorded hours. Instawork has said the rate exceeds minimum wage, though exact amounts are subject to confidentiality terms. In Bengaluru, vendors received hourly pay under verbal agreements to wear head-mounted cameras while continuing regular work. Once annotated, the motion data enters training pipelines that robotics partners can reuse indefinitely; the original worker is no longer required for that skill. Similar collection programs, including MicroAGI’s work with factory staff in Munich, follow the same pattern.

Instawork cites industry totals of roughly 100,000 hours of robot training data in 2024, about one million hours in 2025, and a projected 20 million hours in 2026. The company reports already gathering hundreds of thousands of hours monthly across its network of approximately 10 million Pros and plans global expansion of Instacore. Documented use includes U.S. workplaces and Indian markets. Company statements note that robots will still need human oversight and that technician roles may appear. The measured path is rapid growth in real-world skill recordings that move robots from controlled labs into ordinary commercial settings.

Skilled workers supply the precise movements that become permanent training assets for the companies that own or license the resulting models. Participation is presented as voluntary extra income, yet the transferred skills can support robotic systems that perform the same tasks at lower ongoing labor cost. Available public records are the June 9, 2026 Instawork press release on the hardware and purpose, contemporaneous Business Insider reporting on the rollout, and local accounts of workers wearing the system while cutting hair or working in markets.

Sources Instawork Robotics Lab Debuts Instacore - a Wearable System Built to Scale Real-World Robot Training Data https://www.accessnewswire.com/newsroom/en/business-and-professional-services/instawork-robotics-lab-debuts-instacore-a-wearable-system-built-1174313

First Look at Instawork's Robot-Training Camera System for Gig Workers https://www.businessinsider.com/instawork-instacore-gig-workers-wearable-camera-train-robots-data-2026-6

Instawork Robotics Lab Opens the Physical AI Economy to its 10 Million Workers https://www.newswire.com/news/instawork-robotics-lab-opens-the-physical-ai-economy-to-its-10-million-workers

Here’s why an ‘old school’ San Jose barber is now teaching robots to cut hair with AI https://abc7news.com/post/heres-old-school-san-jose-barber-taiyadi-magic-day-is-now-teaching-robots-cut-hair-ai-instawork-robotics/19754964/

Bengaluru market vendors hired to train AI robots that could replace them https://www.newslaundry.com/2026/06/16/bengaluru-market-vendors-hired-to-train-ai-robots-that-could-replace-them

A person picks up a generic prescription at the pharmacy that looks identical to the brand-name version. The Food and Drug Administration issued a warning letter on February 26, 2025, to Granules India Limited after an inspection from August 26 to September 6, 2024, at its Telangana plant. Investigators found bird droppings and feathers on air handling units and floors, plus a large amount of torn manufacturing records in waste bags. These conditions raise questions about whether the finished tablets and capsules meet the same standards as drugs made under closer domestic oversight.

The same uncertainty shows up in emergency reports. A peer-reviewed study published February 6, 2025, in Production and Operations Management by researchers including John Gray of Ohio State University matched 2,443 generic drugs and found those made in India were linked to 54 percent more severe adverse events—hospitalization, disability, or death—than equivalent U.S.-made versions, using data from the FDA Adverse Event Reporting System. The difference was driven by older generics under cost pressure. Patients cannot choose the factory; the pharmacy decides the supplier, and the label does not name the plant.

In 2023, over-the-counter eye drops made by Global Pharma Healthcare in Chennai and sold as EzriCare and Delsam Pharma Artificial Tears were linked by the Centers for Disease Control and Prevention to a rare drug-resistant Pseudomonas aeruginosa outbreak. FDA inspection from February 20 to March 2, 2023, and subsequent warning letter dated October 20, 2023, documented sterility failures; intact samples tested non-sterile. At least three people died, eight lost vision, and four had an eye removed. Tom Neely, chairman of U.S. manufacturer Oxford Pharmaceuticals, told the Senate Special Committee on Aging on November 19, 2025, that the same conditions at his plant would shut it down and likely lead to handcuffs. Former FDA inspector Peter Baker has stated that enforcement is weaker for many overseas sites.

Readers can check current FDA warning letters and Form 483s on the agency website and look up individual products in the FAERS public dashboard to see reported serious events for specific generics. One practical step is to ask the pharmacist which manufacturer supplied the batch and whether a U.S.-made alternative is available for the same active ingredient.

Sources

Granules India Limited Warning Letter 320-25-48

https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/granules-india-limited-697115-02262025

Official FDA letter detailing the August–September 2024 inspection findings of bird droppings, torn CGMP records, and contamination risks at the Telangana facility.

All generic drugs are not equal, study finds

https://www.eurekalert.org/news-releases/1074063

Ohio State University press release summarizing the February 2025 Production and Operations Management paper that matched generics and reported 54% higher severe adverse events for India-made products using FAERS data.

Global Pharma Healthcare Private Limited Warning Letter 320-24-03

https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/global-pharma-healthcare-private-limited-657325-10202023

FDA warning letter following the 2023 inspection that confirmed non-sterile eye-drop samples and CGMP failures linked to the U.S. outbreak.

Global Pharma Healthcare Issues Voluntary Nationwide Recall of Artificial Tears

https://www.fda.gov/safety/recalls-market-withdrawals-safety-alerts/global-pharma-healthcare-issues-voluntary-nationwide-recall-artificial-tears-lubricant-eye-drops-due

FDA-posted company announcement of the February 2023 recall citing possible microbial contamination and associated adverse events.

Written Testimony of Tom Neely, Chairman, Oxford Pharmaceuticals

https://www.aging.senate.gov/download/testimony_neely-111925pdf?download=1

November 19, 2025, Senate Aging Committee testimony contrasting domestic inspection consequences with overseas practices and calling for domestic manufacturing incentives.

Citizen Lab’s October 15, 2026 report describes AdFection as the first publicly confirmed case of zero-click mercenary spyware delivered by targeted online advertisements. Discover-Tech, an Israeli firm presenting itself as a digital advertising company, operates the Controlium platform that bids in real-time auctions, receives device identifiers and IP addresses when an ad renders, and can then redirect selected devices to exploit servers. Network logs from Al Jazeera showed the sequence on at least 45 Windows computers in 2024 and 2025: an ad impression from Discover-Tech infrastructure, a Candiru validator check within seconds, an exploit server, and command-and-control traffic. Candiru (rebranded Integrity Labs) was previously placed on the U.S. Commerce Department Entity List for spyware used against journalists, officials, and others. Controlium is also linked to Bindecy and Intelos.

Analysis of roughly four billion Discover-Tech bidding records from March to June 2026 showed the company bid on 3.77 billion impressions and won about 442 million. Ads carrying attacker script tags appeared in 75,373 Android and iOS apps and on 120,768 websites, including Viber, Duolingo, Yahoo Mail, Grindr, and Badoo, as well as sites such as the BBC, New York Times, and CBC. Millions of devices were directed to contact Candiru-linked servers for profiling or reconnaissance; only selected targets received the infection payload. Discover-Tech appeared on certified or approved vendor lists maintained by Google and IAB Europe and served ads through Google, Yandex, and Beeswax. The company exploited GDPR consent frameworks to reach users in the European Union. No evidence of ordinary advertising activity was found.

Citizen Lab previously documented Candiru spyware infections in 2021. The October 2026 report shows the same vendor’s tools delivered through the advertising ecosystem rather than through direct zero-click vectors alone. Discover-Tech’s corporate ties include past board members and shareholders connected to Circles, Senpai Technologies, and the Intellexa network. A separate actor labeled DARK CARTOGRAPHER used Discover-Tech infrastructure to link advertising IDs with phone numbers via mobile carrier vulnerabilities; Citizen Lab stated a follow-up report is forthcoming. After disclosure, Google, IAB Europe, Beeswax, Vungle, and Eskimi suspended or removed Discover-Tech’s access.

Ordinary ad rendering now serves as a delivery path for state-grade spyware without user interaction. The real-time bidding system broadcasts device identifiers and network data to any participating bidder, and vendor certification processes did not detect Discover-Tech’s dual role. At least 45 Al Jazeera devices were infected; millions more were profiled. Regulatory and platform responses consisted of post-disclosure suspensions by several ad networks. Citizen Lab called for regulators to examine whether Discover-Tech and Candiru/Integrity Labs violated applicable laws and recommended changes to ad auction controls, vendor vetting, and exploit detection.

Sources

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Exposing AdFection Executive Summary

https://citizenlab.ca/research/exposing-adfection-executive-summary/

No click required: How the ad industry became a pipeline for mercenary spyware

https://www.csoonline.com/article/4236143/no-click-required-how-the-ad-industry-became-a-pipeline-for-mercenary-spyware.html

AdFection Attack Hid Zero-Click Spyware Inside Online Ads

https://www.cyberkendra.com/2026/10/adfection-discover-tech-candiru-spyware-ads.html

AdFection Spyware: 45 Infections, Millions Profiled

https://readus247.com/adfection-spyware/

Palantir Technologies builds the Gotham platform for defense, intelligence, and law enforcement customers. The platform integrates data from signals intelligence, informants, sensors, and other sources into an ontology of people, places, organizations, and events so users can identify patterns, map relationships, and plan operations. Palantir’s own materials state that Gotham overlays live sensor views with AI-generated insights to anticipate possible outcomes and suggest courses of action. In an October 2026 interview with Louis Robson of Palantir Sovereign, CEO Alex Karp said the same predictive methods used on the battlefield can be applied to domestic settings: “You can actually predict people's behaviour, which may mean you are predicting their actual thoughts one is going to have in a domestic context.” He added that the capability requires control.

Karp distinguished military from domestic use. He argued that restricting predictive systems on the battlefield would leave the United States unable to compete against peer adversaries employing similar tools, while domestic application raises privacy concerns that must be addressed now. He noted that entities can comply with the letter of the law while undermining its purpose. Palantir’s SEC filings describe Gotham as enabling pattern identification across large datasets and handoff from analysis to operational response. Independent analyses describe the same systems supporting “pattern of life” reconstructions from commercial and government data streams, including location, communications, and financial records purchased without warrants under existing interpretations of the third-party doctrine.

Palantir was founded in 2003 and developed Gotham for U.S. intelligence community counterterrorism work. The platform has since been deployed by U.S. agencies, NATO (via the Maven Smart System), and intelligence and police services in multiple European countries. Public reporting and government assessments note contracts for targeting support, mission planning, and data fusion. Brennan Center analysis documents how pre-LLM tools such as Gotham already combined commercial location and other datasets into detailed behavioral profiles; large language models accelerate inference of attributes and likely actions from unstructured text and behavioral traces. Karp’s statements place the further step—anticipating thoughts as well as actions—within reach of systems already fielded.

Systems that forecast individual behavior from aggregated digital traces can be directed at foreign adversaries or at domestic populations under the same technical architecture. Documented deployments remain concentrated in government intelligence and defense contracts; commercial Foundry and AIP products share the underlying ontology model. No public regulatory framework currently distinguishes battlefield predictive applications from domestic ones beyond existing privacy statutes that do not cover bulk commercial data purchases. Karp’s call for control of domestic use, paired with defense of unrestricted military application, leaves the boundary dependent on customer policy and internal safeguards rather than external technical or legal limits.

Sources

Can AI predict people's thoughts? Palantir CEO Alex Karp weighs in

https://www.thenews.com.pk/latest/1419751-can-ai-predict-peoples-thoughts-palantir-ceo-alex-karp-weighs-in

Palantir CEO Warns AI Could Predict Your Next Move Before You Make It

https://insiderpaper.com/louis-robson-interview-palantir-ceo-alex-karp/

AI and the Commercial Data Loophole

https://www.brennancenter.org/our-work/analysis-opinion/ai-and-commercial-data-loophole

Palantir Gotham: Uses, Contracts, vs Foundry

https://www.bdemerson.com/article/palantir-gotham

What Does Palantir’s AI Do, and What Risks Do Critics Raise?

https://dailytech.ai/post/palantir-ai-what-it-does-and-risks/

Contaminated preservative-free artificial tears manufactured by Global Pharma Healthcare in India and distributed in the United States under the EzriCare and Delsam Pharma brands were linked by the Centers for Disease Control and Prevention to an outbreak of an extensively drug-resistant strain of Pseudomonas aeruginosa never previously seen in the country. By mid-May 2023 the investigation had identified 81 patients across 18 states. Four people died, 14 experienced vision loss, and four underwent surgical removal of an eye. Most patients had used the products, and laboratory testing matched the outbreak strain to both opened and unopened bottles.

An FDA inspection of the Global Pharma facility in February–March 2023 documented multiple current good manufacturing practice violations. These included failure to validate sterilization processes for ophthalmic products, inadequate microbial testing, use of multi-dose bottles without adequate preservatives, and lack of container-closure integrity. The agency placed the firm on import alert and later issued a warning letter classifying the products as adulterated. The company recalled the drops at the consumer level as a Class I recall.

Comparable quality and data-integrity problems have been documented at other Indian manufacturers that supply the US market. Intas Pharmaceuticals received FDA warning letters describing a “cascade of failure,” including quality-control analysts pouring acetic acid onto analytical records in a trash bin and shredding or discarding original good-manufacturing-practice documents. Hetero Labs received Form 483 observations in September 2025 for an undisclosed off-site warehouse holding active pharmaceutical ingredients, an unregistered testing laboratory, delayed entry of inspectors for two hours, and conditions that included birds, bird droppings, lizards, and cats among stored materials.

Most FDA inspections of foreign drug plants are announced in advance, giving facilities time to prepare. A 2025 analysis of inspection data found that the odds of receiving the most severe outcome were more than 250 percent higher for unannounced inspections than for pre-announced inspections at the same Indian facilities. In May 2025 the FDA announced it would expand the use of unannounced inspections at foreign manufacturing sites that produce medicines for the US market in order to reduce the disparity with domestic oversight.

Sources

Outbreak of Extensively Drug-resistant Pseudomonas aeruginosa Associated with Artificial Tears

https://archive.cdc.gov/www_cdc_gov/hai/outbreaks/crpa-artificial-tears.html

CDC investigation summary documenting 81 cases, 4 deaths, 14 vision-loss cases, and 4 enucleations linked to Global Pharma artificial tears.

Global Pharma Healthcare Private Limited - 657325 - 10/20/2023

https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/global-pharma-healthcare-private-limited-657325-10202023

FDA warning letter detailing CGMP violations, import alert, and recall of the contaminated eye-drop products.

Intas Pharmaceuticals Limited - 652067 - 07/28/2023

https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/intas-pharmaceuticals-limited-652067-07282023

FDA warning letter describing destruction of quality records by pouring acid and shredding documents at an Intas plant.

FDA Announces Expanded Use of Unannounced Inspections at Foreign Manufacturing Facilities

https://www.fda.gov/news-events/press-announcements/fda-announces-expanded-use-unannounced-inspections-foreign-manufacturing-facilities

Official FDA announcement of the May 2025 policy change to increase unannounced foreign inspections.

Preannounced Regulatory Inspections: FDA Oversight and Drug Quality Risk

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5252874

Peer-reviewed working paper reporting that unannounced inspections in India carried more than 250 percent higher odds of the most severe outcome compared with pre-announced inspections.

Buying a game no longer stops the publisher from turning it off inside your home. On June 16, 2026, the European Commission issued Communication C(2026) 4110 final, rejecting the Stop Destroying Videogames initiative despite 1,294,188 verified citizen signatures submitted on January 26, 2026. Rather than requiring an offline mode when support ends, the Commission accepted arguments echoed by European Commission Director Giuseppe Abbamonte across three hearings: that mandatory server check-ins are a copyright and business-model right.

Inserting a paid disc of Ubisoft's The Crew after March 31, 2024 halts at the main menu because the game checks closed company servers before loading single-player roads. Publishers claim constant server verification is a technical necessity, yet volunteer coders released The Crew Unlimited server emulator on September 15, 2025 without Ubisoft's source code. While fan patches cannot rescue every online architecture, buyers absorb the entire loss when a license is revoked and cannot opt out without forfeiting their library.

Next comes an industry-drafted voluntary code of conduct in late 2026 alongside a European Commission review of the Digital Content Directive. Communication C(2026) 4110 final states that forcing playable end-of-life states could expose confidential business know-how and interfere with publisher business models. Treating purchased software as a revocable service appears headed toward normalizing remote kill-switches across everyday connected hardware, letting vendors or acquirers brick paid tools whenever hosting costs cut into new sales.

Every European buyer of online-tethered software remains exposed to uncompensated remote shutoffs once a publisher moves on. Directive (EU) 2019/770 covers initial digital conformity but does not bar a company from shutting down verification servers years after purchase, leaving End User License Agreements in control. Read European Commission Communication C(2026) 4110 final on the official initiative portal, and download offline installers from DRM-free storefronts like GOG.com before a remote server check locks your copy.

Sources

Stop Destroying Videogames - Commission's reply to the European Citizens' Initiative

https://citizens-initiative.europa.eu/stop-destroying-videogames-commissions-reply-european-citizens-initiative_en

Official European Union portal page confirming the January 26, 2026 submission of 1,294,188 verified signatures and summarizing the Commission's June 16, 2026 decision against proposing binding legislation.

Communication from the Commission on the European Citizens' Initiative 'Stop Destroying Videogames' C(2026) 4110 final

https://citizens-initiative.europa.eu/document/download/75d642bc-6ff5-4713-b1cf-14f4aaf15869_en?filename=C_2026_4110_EN.pdf

Primary legal text issued in Strasbourg on June 16, 2026 detailing why the European Commission declined a playability mandate to protect publisher business models and confidential know-how under Directive (EU) 2019/770.

European Citizens' Initiative: Stop Destroying Videogames — European Parliamentary Research Service

https://www.europarl.europa.eu/thinktank/en/document/EPRS_ATA(2026)785750

Official May 11, 2026 European Parliament briefing outlining the consumer protection and intellectual property law tensions ahead of the May 2026 plenary debate.

Stop Destroying Videogames Public Hearing — European Parliament Committees IMCO, JURI, and PETI

https://www.europarl.europa.eu/committees/en/stop-destroying-videogames/product-details/20260429ECI00242

Official European Parliament committee record for the joint public hearing examining remote software disabling, licensing terms, and post-support game preservation.

Stop Killing Games: Why a Movement About Video Games Has Become a Debate About Digital Rights

https://europeanpirates.eu/stop-killing-games-why-a-movement-about-video-games-has-become-a-debate-about-digital-rights/

June 15, 2026 policy brief from the European Pirates detailing Pirate Party MEP Markéta Gregorová's parliamentary intervention and how Ubisoft's March 31, 2024 shutdown of The Crew sparked the digital ownership campaign.

The Crew will soon be back from the dead thanks to a fan-made mod

https://traxion.gg/the-crew-will-soon-be-back-from-the-dead-thanks-to-a-fan-made-mod/

Technical report documenting how volunteer developers built The Crew Unlimited offline server emulator for release on September 15, 2025 after Ubisoft rendered physical discs unplayable.

Rapid data center growth is increasing local electricity demand and cooling water use, which can raise household utility bills and pressure supplies in areas already facing shortages. Residents in multiple states have opposed projects over these costs, environmental effects, and the use of tax abatements.

On October 14, 2026, BlackRock CEO Larry Fink told CNBC that a moratorium on data centers would cause a U.S. recession because the economy has become tied to AI capital spending. He said most concerns rest on misinformation, that golf courses use more water than data centers, and that the projects create jobs in construction, hardware, and energy infrastructure.

Lawrence Berkeley National Laboratory estimated that U.S. data centers directly consumed about 17.4 billion gallons of water in 2023, with indirect water for electricity generation around 211 billion gallons. Golf irrigation still exceeds direct data center use today, but projections show data center totals rising quickly. Separate analyses note that AI-related investment has supported a substantial share of recent economic growth.

These figures leave open how communities weigh immediate rate and resource impacts against the broader investment cycle, including whether local controls remain viable when national growth arguments are advanced.

Sources

BlackRock's Fink warns: data center moratorium could spark a recession

https://www.cnbc.com/2026/10/14/blackrocks-fink-warns-data-center-moratorium-could-spark-a-recession.html

CNBC report on the October 14, 2026 interview detailing Fink's recession warning, job claims, and description of concerns as misinformation.

BlackRock CEO Says Data Center Moratorium Could Spark Recession

https://www.forbes.com/sites/antoniopequenoiv/2026/10/14/blackrock-chief-larry-fink-says-pause-on-data-center-construction-could-spark-recession/

Forbes coverage of the same statements and the context of local opposition ahead of midterm elections.

2024 United States Data Center Energy Usage Report

https://escholarship.org/uc/item/32d6m0d1

Lawrence Berkeley National Laboratory analysis estimating 17.4 billion gallons of direct water use and roughly 211 billion gallons of indirect water tied to electricity generation for 2023, with growth projections.

Do Golf Courses Really Use More Water Than Data Centres?

https://mrkt30.com/golf-courses-vs-data-centres-water/

Analysis comparing golf irrigation volumes against LBNL data center figures, noting direct-use differences and the role of indirect electricity-related water.

AI investment boom may be papering over US economic cracks: Mike Dolan

https://www.reuters.com/commentary/reuters-open-interest/ai-investment-boom-may-be-papering-over-us-economic-cracks-mike-dolan-2026-10-15/

Reuters commentary on the scale of AI-related capital spending contribution to recent U.S. GDP growth and potential offsets in other investment categories.

On August 3, 2026, the Lake Shore Board of Education in St. Clair Shores, Michigan, voted 5-0 with two members absent to approve purchase of the Coram AI video surveillance system from Carahsoft Technology Corp. through the OMNIA Software Solutions and Services cooperative contract R240303, in an amount not to exceed $281,162.08. The package covers 296 Coram AI video feed licenses plus four Coram Point CP-Y-1-30D servers that each support up to 80 channels and retain 30 days of video. Coram AI integrates with the district’s existing cameras and adds artificial-intelligence features for advanced video search, real-time monitoring, and intelligent event detection so staff can locate and review footage faster.

Board minutes record that President Ziegler presented a question about privacy and student rights, Amy Thomas-August inquired about funding, and Wendy Tobias asked what the system would look for. The minutes list the questions but do not record any answers or further discussion. The purchase was funded through Section 31aa School Safety and Mental Health Grant money, which Michigan statute allows districts to use for safety infrastructure once they opt in. The three-year subscription was paid entirely in the first year.

A Michigan Freedom of Information Act response dated October 8, 2026, released the Carahsoft quote, two purchase orders, price sheets, installer paperwork, the agenda, the minutes, and the board item itself. The response stated that the records included the Coram AI contract, yet the actual contract document was not among the 12 files provided. The quote and purchase order both reference the OMNIA cooperative contract number R240303, which was also absent from the released materials. Nothing in the released file states which staff members can search the video, what specific events the detection algorithms flag, or what data Coram AI retains or shares.

Coram AI’s public materials describe natural-language video search, face recognition across cameras, license-plate reading, and firearm detection that generate real-time alerts, all running on cameras the district already owns. The platform is marketed to schools as a way to convert existing cameras into searchable, alert-capable systems without full hardware replacement. Districts that accept Section 31aa safety funds must agree to certain investigation and privilege-waiver terms in the event of a mass-casualty incident. The board minutes do not show that those terms, data-retention limits, or access controls were discussed before the unanimous vote.

Sources

Lake Shore OKs $281,162 purchase of Coram AI surveillance system; trustees ask about privacy

https://citizenportal.ai/articles/9591231/michigan/school-boards/lake-shore-public-schools-macomb/lake-shore-oks-281162-purchase-of-coram-ai-surveillance-system-trustees-ask-about-privacy

Summary of the August 3, 2026 board action, 5-0 vote, amount, OMNIA contract, and recorded questions on privacy and funding.

At-a-glance: Key votes from Lake Shore Board special meeting, Aug. 3, 2026

https://citizenportal.ai/articles/9591225/michigan/school-boards/lake-shore-public-schools-macomb/at-a-glance-key-votes-from-lake-shore-board-special-meeting-aug-3-2026

Confirms the Coram AI procurement alongside other unanimous votes that night and notes follow-up questions requiring clarification.

Security Cameras for Schools | Coram AI

https://www.coram.ai/school-security

Vendor description of AI features including text search, face recognition, license-plate reading, and weapon detection that work with existing IP cameras.

OMNIA Partners – Software Solutions and Services | Carahsoft

https://www.carahsoft.com/buy/slg-contracts/all-states/omnia-partners/omnia-region-4

Contract R240303 details used by the district for the Carahsoft purchase of software solutions.

Section 31aa Update: The Saga Continues

https://www.thrunlaw.com/news/section-31aa-update-the-saga-continues/

Explains Michigan’s School Safety and Mental Health Grant funding, allowable uses for safety infrastructure, and related investigation requirements.

Drivers can be tracked across state lines when police departments share access to Flock Safety automated license plate reader networks. Audit logs released under public records laws show one Texas department running over 380,000 searches on a Michigan agency’s cameras in a recent period, while the local department itself ran far fewer. These queries often cover vehicle color, make, model, stickers, and other attributes, not just plate numbers. Anyone driving past a camera can leave a searchable record that officers elsewhere may query with only a logged reason, no warrant, and no advance notice to the person.

The same records show searches that pull data from hundreds or thousands of camera networks at once. A single query can reach cameras in multiple states. Retention defaults to about 30 days in many places, but agencies set their own policies and can share more widely. Public transparency pages list partner agencies, yet the volume and geographic reach mean ordinary people have limited practical ways to know who has looked at their vehicle movements or why.

Documented cases from multiple investigations show some officers used the same systems for personal reasons, including tracking partners or acquaintances. Agencies log every search, and Flock states that customers own their data and control sharing. Those controls do not prevent high-volume or loosely justified queries, and some logs have been released with incomplete reasons or case numbers. Courts have mixed rulings on whether long-term aggregation of this data counts as a search under the Fourth Amendment.

Residents and journalists have used public records requests to surface the audit files. The files show both routine investigative use and patterns that raise questions about oversight when thousands of searches occur daily from outside the jurisdiction. Company materials emphasize crime-solving tools and audit trails. The public records show the practical scale of access once cameras are installed and sharing is enabled.

Sources

TikTok creator uses public records to question how police use Flock cameras

https://www.wzzm13.com/article/news/local/tiktok-creator-uses-public-records-to-question-how-police-use-flock-cameras/69-ab9871f2-296c-4647-bbed-426498996906

Local report on FOIA releases documenting high-volume out-of-state searches on a Michigan Flock network.

Houston police are using Flock Safety with few, if any, guardrails

https://www.houstonchronicle.com/projects/2025/houston-flock-surveillance-explained/

Investigation of Houston PD search volumes and frequently vague justifications in Flock audit logs.

USA TODAY found Flock camera abuse. Now, Flock is hiding key data.

https://www.usatoday.com/story/news/nation/2026/08/28/flock-camera-investigation-police-arrested-fired-surveillance/91383586007/

Report on officers investigated, fired, or arrested for personal misuse of Flock systems.

What Flock cameras really see – and how

https://www.npr.org/2026/10/14/nx-s1-5984956/flock-camera-ring-police-ice-video

Explanation of the national network, warrantless attribute searches, and how data moves between agencies.

How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations

https://www.wired.com/story/how-an-atlanta-suburb-ended-up-sharing-flock-data-with-more-than-2000-organizations/

Details on how one agency’s sharing settings can make its camera data available to thousands of organizations.

Once installed on a phone, often through zero-click methods that require no action from the target, Pegasus can extract messages, emails, photos, and contacts while activating the camera and microphone for real-time monitoring and tracking location data. This turns a personal device into a continuous surveillance tool without the owner’s knowledge, exposing private conversations, movements, and potentially health-related information stored on the device.

Forensic analyses by Amnesty International’s Security Lab and others documented successful infections on the phones of journalists, human rights defenders, and associates of Jamal Khashoggi, including infections occurring before and after his killing. These cases show governments using the tool for transnational monitoring of critics, which can chill free expression, expose sources, and increase risks of physical or professional harm to the individuals involved.

On November 3, 2021, the US Commerce Department added NSO Group to the Entity List after determining the company supplied spyware that foreign governments used to maliciously target government officials, journalists, businesspeople, activists, academics, and embassy workers. The designation restricts US companies from exporting technology to NSO Group without a license and was framed as addressing activities contrary to US national security and foreign policy interests.

Despite the blacklist, NSO Group has pursued lobbying efforts in Washington. A November 7, 2023 letter from a partner at Paul Hastings, filed under FARA and reported by The Intercept, requested an urgent meeting with the Secretary of State, citing the need for cyber intelligence tools after the Hamas attacks on Israel.

Sources

Commerce Adds NSO Group and Other Foreign Companies to Entity List for Malicious Cyber Activities

https://www.commerce.gov/news/press-releases/2021/11/commerce-adds-nso-group-and-other-foreign-companies-entity-list

Official November 3, 2021 announcement detailing the Entity List addition for supplying spyware used against journalists, activists, and others.

Massive data leak reveals Israeli NSO spyware used to target activists, journalists, and political leaders globally

https://www.amnesty.org/en/latest/news/2021/07/the-pegasus-project/

Amnesty International release on the 2021 Pegasus Project describing full device access capabilities and documented infections of journalists and Khashoggi associates.

Forensic Methodology Report: How to catch NSO Group’s Pegasus

https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/

Technical report from Amnesty’s Security Lab on forensic traces, zero-click vectors, and infection evidence on analyzed devices.

Israeli Spyware Firm NSO Demands “Urgent” Meeting With Blinken Amid Gaza War Lobbying Effort

https://theintercept.com/2023/11/10/nso-group-israel-gaza-blacklist/

Reporting on the November 7, 2023 Paul Hastings letter requesting a meeting with the Secretary of State as part of efforts to reverse the blacklist.

Israeli-Made Spyware Used to Monitor Journalists and Activists Worldwide

https://www.occrp.org/en/project/the-pegasus-project/israeli-made-spyware-used-to-monitor-journalists-and-activists-worldwide

OCCRP overview of the Pegasus Project forensic findings confirming infections on phones of journalists and activists worldwide.

In Mason County, West Virginia, Nscale is building the Monarch Compute Campus on more than 2,250 acres. The company says Phase 1 will deliver 1.35 gigawatts of AI computing capacity by early 2028, with a longer path to more than 8 gigawatts. Nscale describes more than $20 billion in planned investment and an on-site natural-gas microgrid developed with NVIDIA and Caterpillar. The project is the first state-certified AI microgrid in the United States.

On part of the land sits a grove of roughly 200 American chestnut trees at the former Clements State Tree Nursery. These trees were planted in the 1970s from nuts of wild survivors of chestnut blight. The blight, first identified in 1904, killed an estimated 4 billion American chestnut trees across the eastern United States and left the species functionally extinct in the wild. The grove has served as a seed source for restoration plantings across West Virginia.

On October 10, 2026, Governor Patrick Morrisey announced a preservation plan after an October 5 assessment with The American Chestnut Foundation, the West Virginia Division of Natural Resources, and the Department of Agriculture. The existing trees will be relocated within the property in late 2027 during their dormant season under professional arborist supervision. Nscale will pay the full cost. Genetic material has already been preserved through additional stands and grafts on state land. The trees will remain available for seed harvesting.

Residents near the site face a large construction project that will operate independently of the local grid. The state has chosen to move the trees rather than leave them in place. Anyone can read the governor’s statement and Nscale’s campus page to see the official plan and the company’s description of the project.

Monarch Compute Campus West Virginia | AI Infrastructure Development

https://www.nscale.com/ai-infrastructure/monarch

Nscale’s official page describing the 2,250-acre Mason County campus, 1.35 GW Phase 1 target, 8 GW+ potential, $20 billion+ investment, and on-site microgrid with NVIDIA and Caterpillar.

Governor Morrisey Announces Plan to Preserve Historic Trees at Former Clements State Tree Nursery

https://governor.wv.gov/article/governor-morrisey-announces-plan-preserve-historic-trees-former-clements-state-tree-nursery

Official October 10, 2026 statement confirming the October 5 assessment, late-2027 relocation under arborist supervision, Nscale payment, and continued seed access.

The American Chestnut Trees at Clements Tree Nursery

https://tacf.org/american-chestnut-trees-at-clements/

The American Chestnut Foundation’s account of the 1976 planting from wild survivors, its role as a seed source, and the nearly 50-year collaboration with state partners.

What happened to the American chestnut tree?

https://www.npr.org/2024/12/25/1221512098/american-chestnut-tree-blight-restoration

NPR overview of the early-20th-century blight that killed an estimated 4 billion American chestnut trees and left the species functionally extinct.

Trees at former Mason County nursery to be relocated after NScale acquisition

https://wchstv.com/news/local/trees-at-former-mason-county-nursery-to-be-relocated-after-nscale-acquisition

Local reporting on the nursery closure in 2021, Nscale’s acquisition of the site, and the state’s relocation plan.