#FactCheck - AI-Generated Visuals Falsely Shared as Government Subsidy for Free Electricity and Air Conditioners in the Philippines

Introduction

In today’s time, everything is online, and the world is interconnected. Cases of data breaches and cyberattacks have been a reality for various organisations and industries, In the recent case (of SAS), Scandinavian Airlines experienced a cyberattack that resulted in the exposure of customer details, highlighting the critical importance of preventing customer privacy. The incident is a wake-up call for Airlines and businesses to evaluate their cyber security measures and learn valuable lessons to safeguard customers’ data. In this blog, we will explore the incident and discuss the strategies for protecting customers’ privacy in this age of digitalisation.

Analysing the backdrop

The incident has been a shocker for the aviation industry, SAS Scandinavian Airlines has been a victim of a cyberattack that compromised consumer data. Let’s understand the motive of cyber crooks and the technique they used :

Motive Behind the Attack: Understanding the reasons that may have driven the criminals is critical to comprehending the context of the Scandinavian Airlines cyber assault. Financial gain, geopolitical conflicts, activism, or personal vendettas are common motivators for cybercriminals. Identifying the purpose of the assault can provide insight into the attacker’s aims and the possible impact on both the targeted organisation and its consumers. Understanding the attack vector and strategies used by cyber attackers reveals the amount of complexity and possible weaknesses in an organisation’s cybersecurity defences. Scandinavian Airlines’ cyber assault might have included phishing, spyware, ransomware, or exploiting software weaknesses. Analysing these tactics allows organisations to strengthen their security against similar assaults.

Impact on Victims: The Scandinavian Airlines (SAS) cyber attack victims, including customers and individuals related to the company, have suffered substantial consequences. Data breaches and cyber-attack have serious consequences due to the leak of personal information.

1)Financial Losses and Fraudulent Activities: One of the most immediate and upsetting consequences of a cyber assault is the possibility of financial loss. Exposed personal information, such as credit card numbers, can be used by hackers to carry out illegal activities such as unauthorised transactions and identity theft. Victims may experience financial difficulties and the need to spend time and money resolving these concerns.

2)Concerns about privacy and personal security: A breach of personal data can significantly impact the privacy and personal security of victims. The disclosed information, including names, addresses, and contact information, might be exploited for nefarious reasons, such as targeted phishing or physical harassment. Victims may have increased anxiety about their safety and privacy, which can interrupt their everyday life and create mental pain.

3) Reputational Damage and Trust Issues: The cyber attack may cause reputational harm to persons linked with Scandinavian Airlines, such as workers or partners. The breach may diminish consumers’ and stakeholders’ faith in the organisation, leading to a bad view of its capacity to protect personal information. This lack of trust might have long-term consequences for the impacted people’s professional and personal relationships.

4) Emotional Stress and Psychological Impact: The psychological impact of a cyber assault can be severe. Fear, worry, and a sense of violation induced by having personal information exposed can create emotional stress and psychological suffering. Victims may experience emotions of vulnerability, loss of control, and distrust toward digital platforms, potentially harming their overall quality of life.

5) Time and Effort Required for Remediation: Addressing the repercussions of a cyber assault demands significant time and effort from the victims. They may need to call financial institutions, reset passwords, monitor accounts for unusual activity, and use credit monitoring services. Resolving the consequences of a data breach may be a difficult and time-consuming process, adding stress and inconvenience to the victims’ lives.

6) Secondary Impacts: The impacts of an online attack could continue beyond the immediate implications. Future repercussions for victims may include trouble acquiring credit or insurance, difficulties finding future work, and continuous worry about exploiting their personal information. These secondary effects can seriously affect victims’ financial and general well-being.

Apart from this, the trust lost would take time to rebuild.

Takeaways from this attack

The cyber-attack on Scandinavian Airlines (SAS) is a sharp reminder of cybercrime’s ever-present and increasing menace. This event provides crucial insights that businesses and people may use to strengthen cybersecurity defences. In the lessons that were learned from the Scandinavian Airlines cyber assault and examine the steps that may be taken to improve cybersecurity and reduce future risks. Some of the key points that can be considered are as follows:

Proactive Risk Assessment and Vulnerability Management: The cyber assault on Scandinavian Airlines emphasises the significance of regular risk assessments and vulnerability management. Organisations must proactively identify and fix possible system and network vulnerabilities. Regular security audits, penetration testing, and vulnerability assessments can help identify flaws before bad actors exploit them.

Strong security measures and best practices: To guard against cyber attacks, it is necessary to implement effective security measures and follow cybersecurity best practices. Lessons from the Scandinavian Airlines cyber assault emphasise the importance of effective firewalls, up-to-date antivirus software, secure setups, frequent software patching, and strong password rules. Using multi-factor authentication and encryption technologies for sensitive data can also considerably improve security.

Employee Training and Awareness: Human mistake is frequently a big component in cyber assaults. Organisations should prioritise employee training and awareness programs to educate employees about phishing schemes, social engineering methods, and safe internet practices. Employees may become the first line of defence against possible attacks by cultivating a culture of cybersecurity awareness.

Data Protection and Privacy Measures: Protecting consumer data should be a key priority for businesses. Lessons from the Scandinavian Airlines cyber assault emphasise the significance of having effective data protection measures, such as encryption and access limits. Adhering to data privacy standards and maintaining safe data storage and transfer can reduce the risks connected with data breaches.

Collaboration and Information Sharing: The Scandinavian Airlines cyber assault emphasises the need for collaboration and information sharing among the cybersecurity community. Organisations should actively share threat intelligence, cooperate with industry partners, and stay current on developing cyber threats. Sharing information and experiences can help to build the collective defence against cybercrime.

Conclusion

The Scandinavian Airlines cyber assault is a reminder that cybersecurity must be a key concern for organisations and people. Organisations may improve their cybersecurity safeguards, proactively discover vulnerabilities, and respond effectively to prospective attacks by learning from this occurrence and adopting the lessons learned. Building a strong cybersecurity culture, frequently upgrading security practices, and encouraging cooperation within the cybersecurity community are all critical steps toward a more robust digital world. We may aim to keep one step ahead of thieves and preserve our important information assets by constantly monitoring and taking proactive actions.

Introduction

Meta's bet that smart glasses will succeed the smartphone as the dominant personal computing device is, commercially, already paying off. EssilorLuxottica, the eyewear manufacturer that builds the Ray-Ban and Oakley Meta product lines, reported selling more than seven million pairs of AI-enabled glasses in 2025 alone, more than tripling the previous year's sales. Chief Executive Mark Zuckerberg has framed the shift as inevitable, comparing it in a recent interview to the transition from flip phones to smartphones and predicting that within a few years, eyewear without embedded AI will put its wearer at a disadvantage.

Yet as adoption accelerates, two features in various stages of internal testing have pulled Meta back into a familiar and uncomfortable position: at the centre of a privacy controversy over exactly how much a camera- and microphone-equipped wearable can quietly learn about the people around it.

NameTag and the return of facial recognition

In June 2026, the technology publication Wired reported that it had found dormant code for a facial-recognition system, internally called NameTag, embedded inside the Meta AI companion app that pairs with the company's smart glasses – an app that had by then been downloaded more than 50 million times. According to that reporting, the system relies on a pipeline of on-device AI models that detect a face, store it locally on the wearer's phone, and match it against previously saved "faceprints", alerting the wearer when it recognises someone they met before. Meta's Chief Technology Officer, Andrew Bosworth, has described the intended design as privacy-conscious: identification data would be encrypted locally, accessible only while the glasses are being worn, and would not populate a centralised company database. He has pitched the feature as a solution to the everyday difficulty of recalling names and past conversations.

Privacy researchers and advocacy groups have been considerably less reassured. One technologist with the Electronic Frontier Foundation’s Threat Lab who analysed the code concluded that despite having been deactivated, it appeared to be near-complete, and more recent reporting connected a portion of Meta’s facial recognition software licensing to Rank One Computing, a vendor that has also licensed similar tech to both U.S. law enforcement and military groups. Meta took the code down immediately after the story’s publication and claims no decision has been made regarding a public rollout.

"Super sensing" and always-on capture

A second, less publicised effort has drawn similar concern. The Financial Times reported in July 2026 that Meta is internally prototyping glasses, under the working concept "super-sensing", designed to capture ambient audio continuously and take still images every few seconds throughout the day, building a searchable log that a wearer's AI assistant could later query to recall where an item was left or what was discussed earlier. Notably, that reporting indicated Meta had discussed shipping the feature without activating the small LED indicator that currently signals when the glasses' camera is capturing photos or video the very light Meta had just reinforced against tampering on its existing hardware. Critics point out that the indicator is already a limited safeguard, since it is easily missed and unfamiliar to most bystanders; removing it during continuous, always-on capture would eliminate the one visible cue currently available to people nearby.

A pattern regulators are watching closely

Both features have emerged against a backdrop of substantial legal exposure. Meta has previously paid roughly two billion dollars combined in biometric-privacy settlements tied to earlier facial-recognition systems on Facebook, including $650 million under Illinois's Biometric Information Privacy Act and $1.4 billion to the state of Texas. 

A separate class action filed in early 2026 alleges that footage captured by smart-glasses users, including intimate recordings from inside private homes, was reviewed by outside contractors in Kenya for AI-training purposes, a claim that prompted an inquiry from the United Kingdom's Information Commissioner's Office. The Texas Attorney General has opened its own civil investigation into the glasses' data practices. Because U.S. federal privacy law remains fragmented, enforcement of claims like these is likely to continue playing out state by state through statutes such as BIPA, which allow individuals to sue directly, even as the European Union's AI Act imposes separate restrictions on biometric processing within Europe.

Why this matters beyond Meta

For readers focused on cybersecurity and digital privacy, the common thread running through NameTag and super sensing is consent architecture. The smart glasses take in not just what you’re up to but also the location, face, clothes and conversation patterns of anyone within the glasses’ field of vision – all without their consent. Where raising a smartphone to take a photo leaves no ambiguity to nearby observers, glasses made to look like normal eyewear leaves fewer visual and verbal tells of what is actually occurring behind a set of seemingly average lenses. According to security experts and law professors, wiretap laws and the patchwork of existing statutes addressing biometric data aren't prepared for the kind of invisible monitoring that AI-enabled eyeglasses from Meta, and eventually others, are capable of. It's that imbalance between a technology’s unseen power and the limitations of the average person’s awareness that is sure to be the main source of conflict.

CyberPeace Insights

Wearable AI holds real promise for accessibility and everyday convenience, and Meta's continued investment reflects where personal computing is headed. At the same time, features like NameTag and "super-sensing" show why privacy-by-design must stay foundational, not incidental, as this space matures. The core issue isn't innovation itself but consent — ensuring bystanders retain visible, reliable cues when a device is active. Meta's stated moves toward on-device processing and encryption are worth acknowledging as steps in the right direction. CyberPeace believes continued dialogue between industry, regulators, and researchers, rather than adversarial scrutiny alone, is the surest path to public trust.

Conclusion

Meta maintains that both NameTag and Super Sensing remain unreleased and unconfirmed for commercial launch and are subject to further internal review. Executives have publicly disputed characterisations suggesting either feature is further along than the company has described. Even so, the recurring pattern of infrastructure for sensitive capabilities surfacing through independent reporting rather than company disclosure is what has kept privacy advocates, journalists, and regulators paying close attention. It suggests that as smart glasses move from novelty item to mass-market device, the terms of that transition will be shaped as much by courts, regulators, and public pressure as by Meta's own product roadmap.

References

1. https://www.magzter.com/stories/newspaper/Mint-Mumbai/METAS-FLOOD-OF-SMARTGLASSES-HAS-PRIVACY-ADVOCATES-UP-IN-ARMS 
2. Engadget — Wired found code for an unreleased facial recognition feature in Meta's AI app
3. Malwarebytes Labs — Meta's face-recognition code raises new concerns about smart glasses
4. Kaspersky Daily — What's wrong with Meta's NameTag feature and why you should be wary of it
5. Biometric Update — AI glasses reveal widening gap between Meta's privacy safeguards and AI ambitions
6. Fortune — Meta added a privacy-safety feature to its AI glasses but is reportedly testing a 'super-sensing' prototype
7. MacRumors — Meta's 'Super Sensing' Prototype Glasses Quietly Record Everything
8. TechCrunch — Meta sued over AI smart glasses' privacy concerns, after workers reviewed nudity, sex, and other footage

‍

Introduction

As AI becomes more deeply integrated into everyday life and industries, Google Cloud is increasing its investment in AI-ready data centres worldwide, with India emerging as a key part of its expansion plans. Thomas Kurian’s latest India visit highlighted Google Cloud’s expanding ambitions in the country. Beyond the $15 billion, 1GW Visakhapatnam data centre announced in October 2025, Google is planning a larger multi-year AI infrastructure push, backed by partnerships with major enterprises across banking, healthcare, and digital services. This reflects a shift where countries are not only competing to create advanced AI technologies but also to build the infrastructure needed to support and lead the future AI economy. But it's worth being precise about what "building infrastructure" actually means here because it is private, foreign-headquartered capital constructing facilities on Indian soil, under terms that remain largely opaque to the public that will depend on them. That distinction matters more than the investment headline suggests.

‍

The Promise and Pressure of Google’s Full-Stack AI Strategy
‍

For decades, data centres were mainly built to store information, host websites, and support cloud applications. The rise of generative AI has completely changed that role. Today's systems need massive computing power both to train models on huge datasets and to run them every time someone generates content or automates a task. It is distinguished from traditional workloads mainly due to relying on proprietary technologies like GPU or TPU, alongside advanced networking and dynamic storage systems that complement each other and work in unison. The efforts of Google to create its own TPUs are understandable as they played a vital role in a number of achievements made by Google DeepMind. Today, the companies, government entities, and people turning to AI solutions put enormous pressure on the processing of data.

‍

The companies that are building this infrastructure are shaping ecosystems on which others will depend on. Google’s “full stack” approach that infers controlling everything from chips and AI models to cloud platforms and applications which may improve efficiency and reduce costs, but it also creates deeper dependence on a single provider. Like a hospital adopting an AI platform is not just purchasing software; over time, its data systems, workflows, and operations can become closely tied to the underlying cloud ecosystem.

‍

This concern when viewed against the concentration of the global cloud market: Amazon Web Services, Microsoft Azure, and Google Cloud together control roughly two-thirds of global cloud infrastructure, making them the dominant gatekeepers of enterprise computing. As these same companies move upward into AI models and applications while controlling the compute layer beneath them, the debate is no longer only about market share, it is about control over the entire AI value chain.
‍

Why Location Matters and Why It Isn't Enough
‍

In traditional internet services, a delay of a few milliseconds rarely mattered. However, future AI applications like autonomous vehicles, AI-assisted diagnostics, automated factory robotics will demand near-instant decision-making and cannot always depend on servers thousands of kilometres away. Regional data centres reduce that latency, which matters especially for India, where hundreds of millions are expected to interact with AI-powered services in the coming years. There is also the question of data sovereignty, and this is where the infrastructure narrative gets ahead of the regulatory reality. Governments worldwide are increasingly concerned about where citizens' and companies' data is stored and processed and local data centres are presented as the answer, but physical proximity does not automatically translate into legal accountability. Google has acknowledged that it bills cloud revenue through whichever global entity corresponds to the data centre being accessed which means an Indian client's spending on Google Cloud infrastructure inside India may still not be booked, taxed, or contractually governed as an Indian transaction. Google Cloud India Pvt. Ltd reported just ₹2,065.4 crore in FY25 revenue, strikingly disconnected from the scale of a $15 billion facility and its roster of major Indian clients. Servers on Indian soil do not by themselves guarantee that India captures the tax base, the leverage, or the oversight that "data sovereignty" implies.

This gap is widened by where India's own data protection framework stands. The Digital Personal Data Protection (DPDP) Act, 2023 leaves retention periods and purpose limitation loosely specified under Sections 8(7) and 12, and its enforcement rules are still being finalised. When hospitals or banks process data through a foundation-model platform like Gemini Enterprise, questions like where processing occurs and what audit trail exists for cross-border flows are not resolved by a local data centre's presence. At present, they rely mostly on vendor assurance rather than independent verification.
‍

Economic Opportunities: More Than Just Servers
‍

AI data centres are often imagined as buildings filled with computers, but their economic impact extends further, into energy systems, construction, engineering, semiconductor supply chains, and skilled technical work. Countries hosting these facilities can benefit from investment and job creation, while local businesses gain access to AI tools without building expensive infrastructure of their own.

For India, expanded AI infrastructure could support ambitions to become a global technology hub, and could narrow the gap in access to high-performance computing that has historically disadvantaged smaller companies and researchers. That potential is real. But it should be weighed against the terms on which it arrives, whether the economic value generated is captured domestically through tax revenue and enforceable local accountability, or whether India functions primarily as a hosting site while value accrues elsewhere. The current revenue-booking structure suggests the latter is, at minimum, a live risk rather than a settled question. 

‍

The Environmental Challenge of AI Expansion
‍

However, what remains less discussed is the environmental cost behind this expansion from its impact on the power grid and water required for cooling to clearing use of renewable energy. A 1GW facility, the scale for the Visakhapatnam project is comparable to the output of a mid-sized power plant dedicated entirely to compute demand. As models grow larger and adoption accelerates, this level of energy and water consumption has become one of the central concerns of the global AI infra. As much attention as the investment figures receive, the sustainability issue behind such large-scale infrastructure deserves equal visibility.

The Future: AI Infrastructure as National Infrastructure
‍

The expansion of Google Cloud's AI data centres show a change in how the world views computing. Data centres are no longer invisible facilities operating in the background; they are becoming strategic infrastructure comparable to power grids and telecom networks. That comparison should prompt that infrastructure this consequential is usually made subject to public oversight, licensing conditions, and accountability mechanisms proportionate to its importance which is missing so far. Google Cloud's investment and the compute capacity it brings will lower barriers for Indian enterprises and researchers who have long lacked access to frontier-scale infrastructure. Against this backdrop, India needs to develop the regulatory, tax, and competition frameworks to ensure that the foundation serves the country hosting it, rather than the company that owns it.
‍

Beyond Compute: The Emerging Question of AI Sovereignty
‍

The next phase of the AI race may not be defined only by who builds the most capable models, but by who governs the infrastructure, standards, and decision making systems that those models depend upon. As advances in artificial general intelligence and discussions around superintelligence move from research laboratories into policy circles, control over compute resources is becoming a matter of strategic importance comparable to control over energy reserves or communication networks. Nations that rely entirely on external providers for advanced AI infrastructure may eventually find themselves dependent not merely for technology services, but for economic productivity, public administration, healthcare delivery, and national security capabilities. For India, the challenge is therefore larger than attracting investment. It is about ensuring meaningful domestic participation in ownership, governance, talent development, and oversight so that the intelligence systems shaping the future remain aligned with national priorities and public interest.

‍

References
‍

1. https://www.livemint.com/companies/news/google-will-set-up-more-ai-data-centres-in-india-as-demand-grows-says-cloud-business-ceo-thomas-kurian-11783422758078.html 

‍