TikTok to Pay $400 Million to Settle Children’s Privacy Case

Welcome back. The Justice Department and TikTok reached a $400 million settlement to resolve allegations the social-media company violated laws meant to protect the online privacy rights of children.

The Justice Department filed a complaint against TikTok in 2024, alleging it failed to comply with the Children’s Online Privacy Protection Act, which requires internet companies to notify parents, and obtain their consent, before collecting personal information from children under the age of 13. Read more from WSJ.

More news below.

The fitness of the top U.S. cyber agency remains under question. Rep. James Walkinshaw (D., Va.) led a group of Democratic House members on Friday to call on the Government Accountability Office to examine how staff and budgets cuts since early 2025 have affected the ability of the Cybersecurity and Infrastructure Security Agency to protect U.S. critical infrastructure from hacking.

Number of Amazon Web Services access key exposed publicly in the past four years that are still active and potentially exploitable, according to research from Truffle Security. AI testing and development platform Hugging Face was the biggest source of leaked AWS keys, Truffle said. (Bleeping Computer)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.