Six Months of a Reporter's Phone Records (08/30/2026)

Three stories today and only one thread. The mechanism that gets used is whichever one has the least oversight attached to it, and that is a design property rather than an accusation.

Top 3 Critical Privacy Alerts

1. A Journalist’s Phone Records, Taken Without Notice

Sam Levine reports that the administration has used an obscure legal maneuver to seek private information on journalists, non-profits, and unions, without judicial oversight. In one instance the government obtained six months of telephone records for Georgia Fort, a Minneapolis journalist, who was not notified and had no opportunity to contest it. In February federal prosecutors twice sought search warrants for the YouTube account information of Fort and Don Lemon, both facing charges over a Minneapolis church protest they were covering. A judge rejected both requests, finding the government had not established probable cause and saying he wanted both journalists informed so they could challenge it. The government withdrew the request about a month later and did not stop seeking the data. PogoWasRight

Operator Note: The judge did the thing the system is supposed to do, and the answer was to take a different road. That is the part with implications beyond press freedom, because any organization holding records about people can receive a demand through a channel that carries no notice requirement and no opportunity for the subject to object. Ask your counsel which categories of request you would be permitted to tell a customer about, and expect the list to be shorter than you assumed.

2. Texas Freezes State Funding for More Flock Cameras

Governor Greg Abbott has frozen state spending on additional Flock cameras as backlash grows. The move landed just ahead of a Texas Tribune investigation into the cameras. The Verge

Operator Note: This closes a thread we have run all week, from the Florida deputy who allegedly used a plate reader network to stalk a former partner, through polling that found opposition now exceeds support, to a state cutting off the money. Procurement is where these systems arrive and it is also where they stop, which makes the budget line the real control and the policy document the commentary.

3. California Advances Expanded Deletion Rights

SB 923, the Expanding Privacy Rights Act sponsored by the California Privacy Protection Agency, has passed the legislature. The bill would strengthen consumers’ ability to have their data deleted. PogoWasRight

Operator Note: Deletion is the requirement that finds every copy you forgot you made, which is why organizations that handle access requests comfortably still struggle here. If this becomes law, the work is not the deletion mechanism, it is the inventory of backups, exports, analytics warehouses, and vendor systems that a deletion has to reach.

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.