NASA and SpaceX have set February 26 as the launch date for the Crew-6 mission, which will send four astronauts to the International Space Station (ISS) for a six-month stay.
Hackers now spreading malware via Microsoft OneNote attachments
Hackers are now spreading malware using Microsoft OneNote attachments in phishing emails, infecting victims using remote access malware that can be used to install additional malware, steal passwords, or even cryptocurrency wallets.
ChatGPT rolls out a paid version for $42 per month: What it offers, availability and more
The cost of the plan and the enhanced but “experimental” features of ChatGPT may be different for various users. It will depend upon the agreements made with OpenAI and the individual requirements of the user. However, the premium version of ChatGPT won’t be accessible to the general public as the company is offering the paid membership only to some select users.
Climate tech roundup: Food waste, wastewater, and the UK’s troubled battery industry
Welcome back, climate tech readers! Like last week, we’ve got a full slate once more, from food waste to wastewater and more. Let’s dive in.
Nest co-founder Matt Rogers’ new startup is trash
After selling Nest to Google for $3.2 billion, Matt Rogers is no stranger to scaling fast. But unlike last time, Rogers isn’t interested in selling so quickly. “This is the next 20 years of my life. This is not like, build the company in four or five years and sell to Google. This is a big, long journey,” he told TechCrunch.
Rogers is on a quest to end food waste, which accounts for 6% to 8% of all greenhouse gas emissions, and his tool to accomplish that is the humble kitchen trash can. Mill Industries’ bin is sleek and tech-enabled, dehydrating and grinding food until it resembles dried coffee grounds. Then, when it’s full, it automatically requests a box to mail the dried food scraps to one of Mill’s facilities, where it’s turned into chicken feed. How does it get there? That part surprised Rogers the most.
Full TechCrunch+ articles are only available to members.
Use discount code TCPLUSROUNDUP to save 20% off a one- or two-year subscription.
Wastewater recycler Membrion makes light work of removing heavy metals
Industrial facilities from semiconductor plants to automotive factories use surprising amounts of water. What comes out the other end can be challenging to treat and even more challenging to reuse. Which is why Membrion has developed a ceramic membrane that can filter out heavy metals like lead, arsenic and lithium. The startup is $7 million into a Series B round that it hopes will bring in another $3 million.
Britishvolt’s bankruptcy is the death knell for the UK’s battery industry
Britishvolt was always a bit of a long shot, but the battery manufacturing startup appears to have missed its target completely. This week, it announced it was declaring bankruptcy, having made little headway on its planned $4.7 billion gigafactory.
The company’s fall echoes what happened here in the U.S. just over a decade ago when A123 Systems stumbled and entered bankruptcy itself. But the British version of the story may not have a happy ending. With A123, the U.S. had time to cover. With global battery supply chains solidifying, the U.K.’s domestic battery industry might never catch up.
Noon Energy brings Mars tech down to Earth with carbon-oxygen battery system
Space programs pride themselves on developing far-out technologies that end up proving their worth here on Earth. Apollo helped catapult computing, and the Space Shuttle did wonders for avionics and materials science. Now, it’s Mars rover Perseverance’s turn.
The MOXIE experiment was built to prove that carbon dioxide can be turned into oxygen on Mars. Chris Graves, who worked on the instrument, thought it could help make use of carbon dioxide on Earth, so he started Noon Energy. The company’s carbon-oxygen battery promises to store electricity for long periods of time at fairly low cost. The startup announced a $28 million Series A this week.
Sealed buys sensor startup InfiSense to fuel energy-saving services
Heat pumps and home energy retrofits have been getting a lot of attention as a result of incentives contained within the Inflation Reduction Act. That makes it a good time to be Sealed. The company predicts how much energy a retrofit will save and converts the up-front installation costs, billing homeowners based on the savings.
For a company that depends so heavily on data, Sealed’s acquisition of Burlington, Vermont-based InfiSense makes, well, sense. Neither company disclosed the terms of the deal. Sealed plans on offering, though not requiring, InfiSense’s sensors to customers to monitor both energy use and indoor air quality.
Climate tech roundup: Food waste, wastewater, and the UK’s troubled battery industry by Tim De Chant originally published on TechCrunch
We certainly don’t need a repeat of last year
Welcome toThe Interchange! If you received this in your inbox, thank you for signing up and your vote of confidence. If you’re reading this as a post on our site, sign uphereso you can receive it directly in the future. Every week, I’ll take a look at the hottest fintech news of the previous week. This will include everything from funding rounds to trends to an analysis of a particular space to hot takes on a particular company or phenomenon. There’s a lot of fintech news out there and it’s my job to stay on top of it — and make sense of it — so you can stay in the know. —Mary Ann
Last week, I dug into CB Insights’ State of Fintech 2022 report. We’ve already discussed ad nauseam that fintech funding is not just down, but also way down.
And I’m not foolish enough to try and make any real predictions about the state of fintech in 2023.
Instead, I’m going to highlight some specific findings of that report that stood out to me and that I didn’t already write about.
Digital lending funding was down 53% to $11.5 billion in 2022. Dollars raised and deal volume in the fourth quarter dropped to their lowest levels since 2020 — with $1.6 billion raised across 121 deals. That’s a big drop even from just the first quarter of 2022, in which we saw $5.3 billion raised across 198 deals.
It’s not too difficult to surmise why this was the case. In 2022, we saw inflation and interest rates climb and startups with loose underwriting standards are no doubt paying the price with increased delinquencies and defaults. So when investors are thinking about where next to put their money, it’s unlikely that digital lending startups are going to be high on their lists, to be honest.
But guess where we saw an even bigger drop in funding? Banking. Globally, banking funding slid by 63%, or nearly two-thirds, according to CB Insights. Oof. In all of 2022, banking startups raised $9.4 billion across 299 deals. That compares to $25.3 billion raised across 447 deals in 2021.
There were so many challenger banks born in recent years, it is not surprising that that segment became oversaturated. My guess is that we’ll see a real survival of the fittest in 2023 and beyond. Heck, even decacorn Chime has struggled, as evidenced by its round of layoffs in the fourth quarter.
Meanwhile, payments remain the darling of the fintech space, with the segment leading in total funding and deals in the fourth quarter of 2022. About $3.4 billion was raised across 188 deals in the payments space in Q4 — nearly double the $1.8 billion raised across 62 deals by banking startups in the same three-month period. With more businesses and consumers opting to pay for things digitally, even in a post-pandemic world, this is hardly surprising.
And lastly, wealth tech made an impressive showing in terms of investor interest. Wealth tech companies brought in $1.7 billion across 164 deals in the fourth quarter. I think this reflects increased effort on the part of all generations to think ahead when it comes to their money, and not just live for short-term gratification.
Anisha Kothapa, CB Insights’ lead fintech analyst, believes that last year’s funding numbers reflected more of a correction than a bubble.
While of course I still believe fintech is in its early innings, I do also think that people went a little too crazy, too fast in 2021 and a lot of companies that probably shouldn’t have gotten funded did. So whether it’s a correction or a bubble is hard to say really. Either way, let’s hope 2023 brings with it greater due diligence, less ego and more viable business models.
We certainly don’t need a repeat of last year.
Weekly News
Beleaguered fintech startup Bolt revealed a new brand last week that involved the launch of a multimedia campaign featuring this commercial that will stream on Hulu, Peacock, ESPN, ABC, NBC, and other networks, as well as a meme generator “for any internet user to play around with to discover their own shoppergänger,” a company spokesperson told me via email. The company will soon be “rolling out an influencer campaign where creators will dive into #dolltok by building narratives around their #shoppergangers (dolls customized to their own unique shopper personas) in their miniature worlds,” according to the spokesperson. AdAge speculates that the fintech startup is using memes in an effort to “connect with Gen Z.”
From Axios: “Retail trading platform Robinhood is launching an independent media brand called Sherwood that will be led by veteran tech editor and media entrepreneur Joshua Topolsky. The entity will build on the success of Robinhood’s popular daily markets newsletter, Snacks, and will serve as a branding and customer acquisition tool. Sherwood Media has been set up as an independent LLC that will exist as a subsidiary of Robinhood, in part to ensure that the content produced within Sherwood remains editorially independent.”
Snafus can happen even when incumbents and fintechs partner. Reports The Charlotte Observer: “Bank of America experienced delays in online transactions conducted via Zelle for much of the day Wednesday (Jan. 18), but those problems were resolved by the afternoon, the bank said. On outage tracker DownDetector.com, irate customers reported missing funds and unexpected negative balances due to problems with the digital payment network.”
How can fintech startups outlast the VC winter? Peter Hazlehurst, co-founder and CEO of BaaS startup Synctera, shares his thoughts in this TC+ article here.
Reports CFO Dive: “Wilmington N.C.-based nCino announced CFO David Rudow will be leaving the cloud banking provider effective Jan. 31 as the company will lay off about 7% of its workforce, or 117 employees, according to Wednesday press release and a company spokesperson. Chief corporate development and strategy officer Greg Orenstein will move into its CFO seat.”
Nihar Bobba has “dipped” out of Wharton to join fintech-focused venture firm Better Tomorrow Ventures as a principal, according to this tweet. He had been a venture partner there since last March, according to his LinkedIn profile.
Anyone who has tried to buy a new car recently will appreciate this. Publicly traded Upstart, an artificial intelligence (AI) lending marketplace, has added two new applications to its Auto Retail platform — digital finance and online sales — to offer dealerships “a seamless online to in-store car-buying experience, from search to signing.” To hear more rant on this topic and other fun stuff, listen to this week’s Equity Podcast.
A recent panel discussion among VCs Mercedes Bent of Lightspeed Venture Partners, Victoria Treyger of Felicis Ventures and Jillian Williams of Cowboy Ventures hosted by TC editor and StrictlyVC founder Connie Loizos touched on a number of hot topics in the world of fintech. As Connie writes: “If you’re a fintech founder, investor or regulator, you might want to catch the full conversation — which also touches on regulation, talent in the industry and crypto” in the video linked here.
Very talented tech journalist Eric Newcomer is still “marveling at JPMorgan’s decision to go public and sue the founder of the student loan company Frank” after purchasing the startup for $175 million and then accusing CEO Charlie Javice “of helping to fake millions of customers in order to induce the bank to buy her company.” (We’re still marveling too!) I 100% agree with him here: “While I applaud JPMorgan for holding an alleged fraudster accountable, the bank certainly looks pretty foolish for failing to notice before buying the company that so many of Frank’s customers had apparently been brazenly faked.” All this leads Eric to ask: “With JP Morgan suing a startup founder, will 2023 be the year of accountability?”
Wholesale marketplace Faire announced last week that it has built what it describes as an “app for brands” to give independent brands a way to manage their businesses — “all from their phones.” So what’s the fintech tie? A spokesperson told me via email: “With this new brand app, customers can manage orders from anywhere at anytime — meaning they will never miss an order resulting in more money being earned.”
Reports Fintech Finance News: Turkish fintech company “Papara . . . [announced] the launch of its insurance arm. Currently live are mobile and pet insurance products, with more to come in the first half of the year….This is the first expansion of Papara’s product suite outside of its core banking and money management products since launching six years ago. It marks the next step in Papara’s mission to become one of Europe’s leading financial SuperApps, providing users with all the accessible and affordable financial services they need in one place.” More here.
The relationship between incumbents and upstarts has long been a complicated one. Cartoonist Ian Foley illustrates the start of the consolidation and M&A process that the fintech market is starting in earnest here.
Spotlight on Africa, by Tage Kene-Okafor
QED-backed Nigerian fintech TeamApt has made a rebrand by adopting the name of its flagship product, Moniepoint, piloted in 2019 as an agency banking platform that uses POS devices to meet the financial needs of underbanked and unbanked customers in Nigeria.
However, the platform has since metamorphosed into a full business banking solution. While maintaining its agency banking core, Moniepoint began providing small businesses, who still act as agents, with banking and operational tools like working capital, business expansion loans, expense management (business payments cards), accounting and bookkeeping solutions and insurance.
Moniepoint’s interfacing nature between thousands of small businesses and millions of individual customers made it TeamApt’s most well-known brand, among others, that included a white-labeled digital banking product for banks and enterprise software for small business management.
“When we started out in 2015, we were primarily providing back office payment infrastructure for banks and needed an apt team, hence the name TeamApt. Since then, we have evolved significantly and our flagship business banking solution, Moniepoint, has become our core focus and where we see the future,” CEO Tosin Eniolorunda, Moniepoint co-founder and CEO said of the rebrand.
The Moniepoint brand also made the fintech the most money. It currently processes most of the POS transactions in Nigeria with an annualized total payments volume (TPV) of over $170 billion and a customer base of over 600,000 businesses, enabling it to more than double its annual revenues in 2022. The platform also launched a credit offering in 2022, which has already disbursed over $1.4 billion in working capital loans.
Considering all this, it’s easy to see the rebrand as fitting. Moniepoint, now a London-based company, claims to be profitable (it says since 2020). It became QED’s first African investment last July when the U.S. fintech-focused firm led a $50 million+ pre-Series C round that saw Moniepoint’s valuation jump into soonicorn range.
Fundings and M&A
Seen on TechCrunch
Kenyan fintech Kwara raises $3M seed extension, signs deal to reach over 4,000 credit unions
Link raises $30M to help merchants accept direct bank payments
P2P lending platform PeopleFund raises $20M Series C extension led by Bain Capital
Grazzy wants to stop letting people use ‘no cash’ as an excuse to avoid tipping
And elsewhere
Splitero raises $12M to expand home equity investment operations
Insurtech iLife Technologies raises $17M
Sneak peek: Dayforward, a digital-only, full-stack life insurance startup, will announce this week that it has closed on $25 million in funding led by AXA Venture Partners with participation from existing investors HSCM Ventures, Juxtapose, and Munich Re Ventures. It also has acquired Commercial Travelers Life Insurance in an effort to expand its own life insurance offering nationwide. Founded in 2021, the company touts that its term life insurance offering “guarantees the policyholder’s family will continue to receive their income in the event that the policyholder passes away.” The company’s latest funding round brings its aggregate amount of capital raised to $45 million. The money will go toward scaling its business nationwide, developing new insurance products and “continuing to launch its proprietary solutions through strategic partners.”
That’s it for this week. Thanks, once again, for reading and sharing this. See you next time! xoxo, Mary Ann
We certainly don’t need a repeat of last year by Mary Ann Azevedo originally published on TechCrunch
Microsoft is sunsetting social VR pioneer AltspaceVR
AltspaceVR has had a few close calls over the years, but the company that built virtual social spaces well before “metaverse” was a household word is shuttering for good this time.
After announcing that it would close up shop in 2017, Microsoft intervened and the company came under the tech giant’s wing. Now, Microsoft is sunsetting AltspaceVR’s virtual reality platform, a web of immersive social spaces that invited people to hang out with friends or colleagues as 3D avatars.
AltspaceVR will be no more as of March 10, and Microsoft says it will direct more resources toward its mixed reality platform Microsoft Mesh.
“We look forward to what is to come, including our launch of Microsoft Mesh, a new platform for connection and collaboration, starting by enabling workplaces around the world,” the announcement reads.
“In the near-term, we are focusing our VR efforts on workplace experiences, learning from and alongside our early customers and partners, and ensuring we deliver a foundation that enables security, trust and compliance.”
Outside of gaming, Microsoft has built many of its products with an enterprise-first mindset, and VR and mixed reality is no different. The company notes that it plans to “extend” its VR plans to consumers once they are established for the workplace.
AltspaceVR may have never built a formidable user base — a difficult task in VR, given the bespoke hardware required — but the company was very early to social applications of virtual reality.
By 2015, AltspaceVR had created a robust social VR platform where users could mill around wood-paneled rooms with serene views, watch Taylor Swift music videos together or surf the web via a virtual browser. Spatial audio made the experience more immersive, replicating the way that humans perceive sound in real-life environments and laying the groundwork for virtual events.
At the time, most resources and attention in VR were being directed toward cutting edge gaming applications — not virtual hangout spaces. Meta launched Horizon Worlds, an AltspaceVR-like experience with its own inoffensive neutral interiors and not-too-lifelike avatars a full six years later.
It’s not clear if Microsoft plans to roll the product into its other VR efforts or abandon the project outright. Given the timing, AltspaceVR’s fate is likely linked to Microsoft’s dramatic company-wide consolidation, detailed this week. TechCrunch has reached out to the company for additional information about what happens to AltspaceVR’s team and tech in light of the news.
Amidst deep tech industry layoffs, Microsoft announced will reduce 5 percent of its workforce, impacting 10,000 employees. Microsoft CEO Satya Nadella pointed to economic uncertainty and the comedown from the early pandemic’s tech boomtimes as the rationale behind the substantial cuts.
“We will continue to invest in strategic areas for our future, meaning we are allocating both our capital and talent to areas of secular growth and long-term competitiveness for the company, while divesting in other areas,” Nadella said.
It’s not clear if Microsoft is tabling some of its metaverse plans or if AltspaceVR is just a casualty of broad, company-wide cuts. It was only a year and change ago that Facebook boldly rebranded itself as “Meta,” plunging the industry into a buzzy hype cycle around a more immersive, possibly VR-powered vision for social networking.
A year later, the metaverse discourse has already rapid-cycled through the backlash phase, leaving the future of avatar-driven virtual social spaces hazy. It’s possible that the metaverse never needed special hardware at all — non-VR online worlds continue to thrive in 2023 — but it’s worth remembering a company that was well into exploring those possibilities years before tech’s lumbering giants showed up.
Microsoft is sunsetting social VR pioneer AltspaceVR by Taylor Hatmaker originally published on TechCrunch
Google CCI ruling: Play Store to house other app stores by next week
The Supreme Court has recently passed its decision and has upheld CCI’s demands over the company. According to Supreme Court’s order, Google will not only have to pay the imposed fine but will also have to allow third-party app stores in the Play Store within the coming week. Reacting to Supreme Court’s order, Google claimed this move will “hurt consumers” and “stall growth” of the Android platform.
Alphabet makes cuts, Twitter bans third-party clients, and Netflix’s Reed Hastings steps down
Howdy, folks! Happy Friday. While our fearless Week in Review leader Greg enjoys parental leave, I’m filling in, curating the latest on the tech news front. It was a roller coaster of a week once again as economic headwinds took a brutal, demoralizing toll, and as chaos reigned at Elon Musk’s Twitter. Somewhere in the midst of all that, Boston Dynamics demoed an improved bipedal robot, Wikipedia launched a redesign and major universities banned TikTok from their campus networks. Yeah — a lot happened.
Before we get down to business, a friendly reminder that TechCrunch Early Stage 2023 is on April 20 in Boston. It’s a one-day summit for founders who are in the first stages of growing their companies, who have built a product but don’t know how to monetize, and who have an idea but aren’t sure where to find the resources to turn it into a viable business. At Early Stage, experts will share advice on protecting intellectual property, structuring cap tables, developing target customer personas and more. You won’t want to miss it.
most read
Alphabet makes deep cuts: Alphabet, the parent holding company of Google, announced on Friday that it’s cutting around 6% of its global workforce, or roughly 12,000 roles, Paul reports. In an open letter published by Google and Alphabet CEO Sundar Pichai, the narrative followed a similar trajectory to that of other companies that have downsized in recent months, noting that the company had “hired for a different economic reality” than what it’s up against today.
Twitter bans third-party clients: Aftercutting off prominent app makers like Tweetbot and Twitterific, Twitter quietly updated its developer terms to ban third-party Twitter clients altogether. The “restrictions” section of Twitter’s 5,000-some-word developer agreement was updated with a clause prohibiting “use or access [to] the Licensed Materials to create or attempt to create a substitute or similar service or product to the Twitter Applications,” a decision that seems unlikely to foster much goodwill at a time when Twitter faces challenges on a number of fronts.
Beating a Hastings retreat: Netflix founder and co-CEO Reed Hastings announced Thursday that he would step down after more than two decades at the company, Taylor writes. While news of his departure comes as a shock, Hastings noted in the announcement that Netflix has planned its next era of leadership “for many years.” Netflix will maintain its co-CEO structure in Hastings’ absence, promoting COO Greg Peters to the tandem role with Ted Sarandos.
College students, no TikTok for you: Public universities across a widening swath of U.S. states have banned TikTok in recent months, and two of the country’s largest colleges followed suit earlier this week. As Taylor reports, the University of Texas and Texas A&M University took action against the social app, which is owned by Beijing-based parent company ByteDance — prohibiting campus network and device users from accessing TikTok. The flurry of recent banswas inspired by executive orders issued by a number of state governors.
Wikipedia gets a makeover: This week, Wikipedia, a resource used by billions every month, got its first makeover on the desktop in over a decade, Sarah writes. The Wikimedia Foundation, which runs the Wikipedia project, launched an updated interface aimed at making the site more accessible and easier to use, with additions like improved search, a more prominently located tool for switching between languages, an updated header offering access to commonly used links, and more.
Pour one out for AmazonSmile: Just a few days after announcing a significant round of layoffs, Amazon said that it would end AmazonSmile, its donation program that redirects 0.5% of the cost of all eligible products toward charities. Amazon claimed that the program had “not grown to create the impact that [it] had originally hoped,” but as Romain notes, since 2013, Amazon has donated $400 million through AmazonSmile. Ending it is seems more likely a move to cut costs.
Payday for data breach victims: If you were one of the nearly 77 million people affected by last year’s T-Mobile breach, you may have a few bucks coming your way. Devin reports that the company will pay $350 million to be split up by customers and lawyers, plus $150 million “for data security and related technology.” The breach apparently occurred sometime early last year, after which collections of T-Mobile customer data were put up for sale on various criminal forums.
Robots that grab as well as throw: TechCrunch’s intrepid Matt Burns writes about a demo video this week showing Hyundai-backed Boston Dynamics’ humanoid robot, Atlas, equipped with gripper hands that can pick up and drop off anything the robot can grab independently. The claw-like gripper consists of one fixed finger and one moving finger; Boston Dynamics says that the grippers were designed for heavy-lifting tasks, like Atlas holding a keg over its head during a Super Bowl commercial. Nifty.
Dungeons & Dragons:After weeks of backlash and protests from fans, Wizards of the Coast — the Hasbro-owned publisher of Dungeons & Dragons — announced it will now license Dungeons & Dragons’ core mechanics under the Creative Commons Attribution 4.0 International license. This gives the community “a worldwide, royalty-free, non-sublicensable, non-exclusive, irrevocable license” to publish and sell works based on Dungeons & Dragons — a massive change of heart for the gaming giant, which was considering implementing a new license that would require certain Dungeons & Dragons content creators to start paying a 25% royalty.
audio roundup
Whether it’s to pass the time while commuting or to liven up the morning jog, TechCrunch likely has a podcast to suit your fancy. On startup-focused Equity this week, Natasha, Mary Ann and Rebecca jumped on the mic to talk through a diverse news week, including deals from Sophia Amoruso’s new fund, Welcome Homes, and a look at compliment-focused social media apps. Found, meanwhile, featured Mir Hwang, the co-founder and CEO of GigFinesse, who talked about how his struggles to book music gigs as a teenager pushed him to launch the company that connects artists with venues for live shows.
TechCrunch+
TC+, TechCrunch’s premium channel for deep dives, surveys, guest posts and general analysis, was jam-packed with content this week (as always). Here’s some of the most popular posts:
On Twitter’s data leak response: Carly writes about Twitter’s allegeddata breach that exposed the contact information of millions of users. In anunattributed blog post, Twitter said it had conducted a “thorough investigation” and found “no evidence” that recent Twitter user data sold online was obtained by exploiting a vulnerability of Twitter’s systems. But as she notes, it’s unclear if Twitter has the technical means, such as logs, to determine if any user data was exfiltrated.
The last unicorns: VCs think a majority of unicorns aren’t worth $1 billion anymore. Rebecca takes a look at the current investment landscape, finding that many of the companies that reached unicorn status last year are in danger of losing it as economic conditions worsen.
Sexism in the workplace: Women-founded startups raised 1.9% of all VC funds in 2022, a drop from 2021, Dominic-Madoriwrites. That percentage is a notable drop from the 2.4% all-women teams raised in 2021. The decline was expected, but stark nonetheless. Aside from 2016, the last time all-women-led startups raised such a low percentage of funds was in 2012, another period of funding decline caused by economic uncertainty and an election.
Alphabet makes cuts, Twitter bans third-party clients, and Netflix’s Reed Hastings steps down by Kyle Wiggers originally published on TechCrunch
A hack at ODIN Intelligence exposes a huge trove of police raid files
Detailed tactical plans for imminent police raids, confidential police reports with descriptions of alleged crimes and suspects, and a forensic extraction report detailing the contents of a suspect’s phone. These are some of the files in a huge cache of data taken from the internal servers of ODIN Intelligence, a tech company that provides apps and services to police departments, following a hack and defacement of its website over the weekend.
The group behind the breach said in message left on ODIN’s website that it hacked the company after its founder and chief executive Erik McCauley dismissed a report by Wired, which discovered the company’s flagship app SweepWizard, used by police to coordinate and plan multi-agency raids, was insecure and spilling sensitive data about upcoming police operations to the open web.
The hackers also published the company’s Amazon Web Services private keys for accessing its cloud-stored data and claimed to have “shredded” the company’s data and backups but not before exfiltrating gigabytes of data from ODIN’s systems.
ODIN develops and provides apps, like SweepWizard, to police departments across the United States. The company also builds technologies that allow authorities to remotely monitor convicted sex offenders. But ODIN also drew criticism last year for offering authorities a facial recognition system for identifying homeless people and using degrading language in its marketing.
ODIN’s McCauley did not respond to several emails requesting comment prior to publication but confirmed the hack in a data breach disclosure filed with the California attorney general’s office.
The breach not only exposes vast amounts of ODIN’s own internal data but also gigabytes of confidential law enforcement data uploaded by ODIN’s police department customers. The breach raises questions about ODIN’s cybersecurity but also the security and privacy of the thousands of people — including victims of crime and suspects not charged with any offense — whose personal information was exposed.
The cache of hacked ODIN data was provided to DDoSecrets, a nonprofit transparency collective that indexes leaked datasets in the public interest, such as caches from police departments, government agencies, law firms and militia groups. DDoSecrets co-founder Emma Best told TechCrunch that the collective has limited the distribution of the cache to journalists and researchers given the vast amount of personally identifiable data in the ODIN cache.
Little is known about the hack or the intruders responsible for the breach. Best told TechCrunch that the source of the breach is a group called “All Cyber-Cops Are Bastards,” a phrase it referenced in the defacement message.
TechCrunch reviewed the data, which not only includes the company’s source code and internal database but also thousands of police files. None of the data appears encrypted.
The data included dozens of folders with full tactical plans of upcoming raids, alongside suspect mugshots, their fingerprints and biometric descriptions and other personal information, including intelligence on individuals who might be present at the time of the raid, like children, cohabitants and roommates, some of whom described as having “no crim[inal] history.” Many of the documents were labeled as “confidential law enforcement only” and “controlled document” not for disclosure outside of the police department.
Some of the files were labeled as test documents and used fake officer names like “Superman” and “Captain America.” But ODIN also used real world identities, like Hollywood actors, who are unlikely to have consented to their names being used. One document titled “Fresno House Search” bore no markings to suggest the document was a test of ODIN’s front-facing systems but stated the raid’s objective was to “find a house to live in.”
The leaked cache of ODIN data also contained its system for monitoring sex offenders, which allows police and parole officers to register, supervise and monitor convicted criminals. The cache contained more than a thousand documents relating to convicted sex offenders who are required to register with the state of California, including their names, home addresses (if not incarcerated) and other personal information.
The data also contains a large amount of personal information about individuals, including the surveillance techniques that police use to identify or track them. TechCrunch found several screenshots showing people’s faces matched against a facial recognition engine called AFR Engine, a company that provides face-matching technology to police departments. One photo appears to show an officer forcibly holding a person’s head in front of another officer’s phone camera.
Other files show police using automatic license plate readers, known as ANPR, which can identify where a suspect drove in recent days. Another document contained the full contents — including text messages and photos — of a convicted offender’s phone, whose contents were extracted by a forensic extraction tool during a compliance check while the offender was on probation. One folder contained audio recordings of police interactions, some where officers are heard using force.
TechCrunch contacted several U.S. police departments whose files were found in the stolen data. None responded to our requests for comment.
ODIN’s website, which went offline a short time after it was defaced, remains inaccessible as of Thursday.
If you know more about the ODIN Intelligence breach, get in touch with the security desk on Signal and WhatsApp at +1 646-755-8849 or zack.whittaker@techcrunch.com by email.
A hack at ODIN Intelligence exposes a huge trove of police raid files by Zack Whittaker originally published on TechCrunch
Elon Musk admits Twitter has too many ads, says fix is coming
Elon Musk continues to change things at a breakneck pace at Twitter, and on Saturday the still-CEO (I guess he hasn’t found anyone willing to take over yet?) seemed to address user complaints that ads are getting worse on the platform. Musk said that the social network would be “taking steps” to address what he acknowledged was too much frequency for ads displayed on Twitter, and also the ads themselves taking up too much space. Finally, Musk reiterated that there will also be a new, higher-priced subscription tier coming that will entirely remove ads.
An option to pay to get rid of ads altogether has been something Twitter users have been expressing a desire for since at least the introduction of the original Twitter paid subscription, which provided a number of features to users but did nothing to change the rate at which they saw ads on the site. Musk previously tipped that there would be a fully ad-free higher tier subscription coming in 2023 in mid-December last year. At the time, Musk also said Blue subcribers at the existing rate would see half the ads of free users.
Musk’s acknowledgement of the sorry state of ads on Twitter comes just after he oversaw the death of the network’s support for third-party clients. Twitter cut off API access for those clients beginning last week, starting by suddenly revoking access for the largest clients, including Tweetbot and Twitterific, and then updated its developer guidelines earlier this week to fully cut off access for all such clients.
Elon Musk admits Twitter has too many ads, says fix is coming by Darrell Etherington originally published on TechCrunch