- Hackers tricked companies like Apple, Meta, and Discord into handing over user data using fake emergency data requests (EDR).
- Criminals exploit compromised law enforcement email accounts to send forged EDRs with real names and signatures, appearing legitimate.
- Companies often verify requests via valid domains but lack specific tools, leading to quick compliance (e.g., within 30 minutes).
- Discord, Apple, and Meta have been targeted since early 2021, with some complying despite later discovering the compromised accounts.
- A privacy service like Bitdefender's Digital Identity Protection can help users manage digital footprints and receive breach notifications.