LIVE · cybersecurity feed
Live wire
security

TikTok reaches $400M settlement with US over COPPA violations

TikTok and its parent company, ByteDance, have agreed to a $400 million settlement with the U.S. Department of Justice (DoJ) to resolve allegations of violating the Children’s Online Privacy Protection Act (COPPA). The agreement, announced by the DoJ, addresses a lawsuit filed in 2024 concerning the social media platform's handling of user data.

ZeroDay News ·

Source: BleepingComputer

TikTok and its parent company, ByteDance, have agreed to a $400 million settlement with the U.S. Department of Justice (DoJ) to resolve allegations of violating the Children’s Online Privacy Protection Act (COPPA). The agreement, announced by the DoJ, addresses a lawsuit filed in 2024 concerning the social media platform's handling of user data.

The DoJ's lawsuit alleged that TikTok knowingly permitted children under the age of 13 to create standard accounts, bypassing its restricted "Kids Mode." Furthermore, the company was accused of collecting and retaining personal information from these underage users without obtaining parental consent. The allegations also included claims that TikTok failed to delete accounts and associated data when requested by parents and maintained insufficient procedures for identifying and removing underage accounts from its platform.

This settlement follows a previous enforcement action against TikTok's predecessor, Musical.ly. In 2019, Musical.ly settled with the Federal Trade Commission (FTC) for $5.7 million over similar allegations of illegally collecting personal data from children under 13 without parental consent. Last year, the FTC referred a new investigation to the DoJ, asserting that TikTok continued to breach COPPA rules despite its prior commitment to compliance.

Under the terms of the new settlement, TikTok will immediately pay $300 million. An additional $100 million will be paid if a court vacates the earlier consent decree involving Musical.ly. This combined $400 million figure represents one of the largest settlements ever reached in COPPA cases.

The DoJ acknowledged that TikTok has implemented significant changes since 2024, specifically noting improvements in its ownership structure, data management practices, and legal compliance operations. The U.S. government also recognized TikTok's efforts to enhance its privacy retention policies, strengthen age-related controls, and improve parental oversight features on the platform.

Assistant Attorney General Brett A. Shumate emphasized the importance of companies adhering to laws governing the collection of children's personal information. He stated that the resolution secures a substantial monetary recovery and underscores the Department's commitment to ensuring children receive the full protections mandated by Congress.

It is important to note that the announcement clarifies that this settlement resolves only the allegations, and there has been no judicial determination that TikTok or ByteDance is liable for the alleged violations.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.