Student Loan Scammer Banned, Paidwork Breach Hits Millions, and Mac Users Face New Lock Threat

This month brought enforcement action against a major student loan con artist, a significant data breach at a gig work platform, a new threat targeting Mac users, and a privacy issue with smart TV apps. Here's what happened and what you need to know.

FTC Bans Student Loan Forgiveness Scammer from the Industry

Dennise Merdjanian and her operation have been permanently banned from the debt relief industry and telemarketing after defrauding more than $45.9 million from consumers. The scam was straightforward: she posed as a government-affiliated debt relief service, convinced borrowers their loans could be forgiven, and collected upfront fees that borrowers never recovered. The FTC's ban means she cannot operate in the debt relief space ever again. If you received calls or emails promising student loan forgiveness in exchange for a fee, that was a scam. Real loan forgiveness programs never ask for money upfront, and the government doesn't call you unsolicited about debt relief.

Paidwork Breach Exposes Data of 23 Million Users

Paidwork, a platform where people complete small online tasks for money, suffered a data breach affecting more than 23 million users. The exposed data includes personal information and financial details. If you have a Paidwork account, check the breach notification site (the company has published instructions) to see if your account was affected. If it was, consider changing your password on that site and on any other platforms where you used the same password. Watch your accounts for unusual activity, and be cautious of emails claiming to be from Paidwork—scammers often follow breaches by impersonating the breached company.

New Mac Malware Locks Your Computer Until You Reveal Your Password

Security researchers discovered a new threat targeting Mac users called ClickLock. It works by tricking you into running a malicious program, which then locks your computer and demands you enter your system password to unlock it. Once you do, the malware has your password and installs a backdoor for future unauthorized access. The threat spreads through downloads from untrusted sources. Protect yourself by downloading software only from official websites or the Mac App Store, keeping your operating system updated, and being skeptical of any popup that asks for your password out of the blue. If your Mac locks unexpectedly, restart it in Safe Mode or contact Apple Support—do not enter your password into suspicious prompts.

LG Smart TVs Will Stop Running Hidden Proxy Apps

Researchers found that over 42 percent of games and apps in LG's webOS app store were secretly using people's televisions as residential proxies—essentially turning your TV into an invisible tool to route internet traffic for unknown third parties. LG has committed to removing and blocking these apps. This was a privacy violation more than an acute threat, but it highlights why you should review app permissions on any smart device. On your LG TV, check which apps have internet access and consider removing ones you don't actively use. The same principle applies to phones, tablets, and other connected devices—assume that unnecessary apps with network permission are potential privacy risks.

You're now up to speed on this month's major incidents. None of them require panic, but all of them deserve your attention and caution moving forward.