Google, GMail is storing your purchases in detail, But you can delete them, one at a time.

Google tracks a lot of what you buy, even if you purchased it elsewhere, like in a store or from Amazon. Just for kicks, I too checked my own information at http://myaccount.google.com/purchases and I could find purchases going back to 2010.
Only thing the purchases would have revealed is that I love camera equipment and I love to tinker. Canon 5D mark IV, Sony A7RII, a few lenses, LIDAR sensors, a boat load of SBCs and books.
(If you too go and check, reload the pages, information might change. It did for me.)
So naturally I went about finding more about this;
First at Google;

Where your orders come from

Your purchases and reservations are brought together from across your Google Account, from sources including:

• Orders placed using Google services, like Google Play Store, Google Express, or through the Google Assistant.
• Order receipts or confirmations received in Gmail.

To see the source of an order, select it to see its details. At the top right, select Info Where's this from?.

Delete your orders

1. To delete an order from your list, select it to see its details.
2. At the top right, select Info Where's this from?.
3. Depending on where you made the order, you can delete it by selecting Delete. Otherwise, select View Details or View Email to go to the original service and manage it.

Then in the wider web;

CNet
Last week, CEO Sundar Pichai wrote a New York Times op-ed that said “privacy cannot be a luxury good.” But behind the scenes, Google is still collecting a lot of personal information from the services you use, such as Gmail, and some of it can’t be easily deleted.

A page called “Purchases ” shows an accurate list of many — though not all — of the things I’ve bought dating back to at least 2012. I made these purchases using online services or apps such as Amazon, DoorDash or Seamless, or in stores such as Macy’s, but never directly through Google.

But because the digital receipts went to my Gmail account, Google has a list of info about my buying habits.

Google even knows about things I long forgot I’d purchased, like dress shoes I bought inside a Macy’s store on Sept. 14, 2015. It also knows:

    I ordered a Philly cheesesteak on a hoagie roll with Cheez Whiz and banana peppers on Jan. 14, 2016.
    I reloaded my Starbucks card in November 2014.
    I bought a new Kindle on Dec. 18, 2013, from Amazon.
    I bought “Solo: A Star Wars Story” from iTunes on Sept. 14, 2018.

And so on.

Then at engadget

Still, it's a lot of information that dates back years and highlights exactly how much Google can access, even when it's being used for you, automatically highlighting cards for Assistant, personal info in Search or directions for Google Maps. Also, while you can delete the entries, it lacks the abilities recently announced for Location History to eliminate info beyond a certain time period, or any kind of bulk delete button at all. You can turn off this type of tracking, according to Google, but there's no link to the controls from this page -- the company told CNBC it's looking into simplifying the settings and that seems like the right move.

GO secure your account.

 

Biance Hot Wallet Hacked and 7000 Bitcoins ($41 Million) Sapped.

Biance formally notified the public via an announcement on the evening of May 7, 2019, about a hacking attack that took 7000 Bitcoins (about $41 Million), 2% of Biance's holdings, from it's hot wallet. The announcement claims the hackers had employed a diverse range of tactics from outright viruses to social engineering techniques such as phishing scams to reach the wallet.
In addition to 7,000 bitcoins hackers gained access to other sensitive information.

“The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time. The transaction is structured in a way that passed our existing security checks. It was unfortunate that we were not able to block this withdrawal before it was executed. Once executed, the withdrawal triggered various alarms in our system. We stopped all withdrawals immediately after that,” the announcement reads.

Press release (of sort)

Binance Security Breach Update

Binance

• 2 days ago

We have discovered a large scale security breach today, May 7, 2019 at 17:15:24 (UTC). Hackers were able to obtain a large number of user API keys, 2FA codes, and potentially other info. The hackers used a variety of techniques, including phishing, viruses and other attacks. We are still concluding all possible methods used. There may also be additional affected accounts that have not been identified yet.
The hackers were able to withdraw 7000 BTC in this one transaction: https://www.blockchain.com/btc/tx/e8b406091959700dbffcff30a60b190133721e5c39e89bb5fe23c5a554ab05ea
The above transaction is the only affected transaction. It impacted our BTC hot wallet only (which contained about 2% of our total BTC holdings). All of our other wallets are secure and  unharmed.
The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time. The transaction is structured in a way that passed our existing security checks. It was unfortunate that we were not able to block this withdrawal before it was executed. Once executed, the withdrawal triggered various alarms in our system. We stopped all withdrawals immediately after that.
Binance will use the #SAFU fund to cover this incident in full. No user funds will be affected.
We must conduct a thorough security review. The security review will include all parts of our systems and data, which is large. We estimate this will take about ONE WEEK. We will post updates frequently as we progress.
Most importantly, deposits and withdrawals will need to REMAIN SUSPENDED during this period of time. We beg for your understanding in this difficult situation.
We will continue to enable trading, so that you may adjust your positions if you wish. Please also understand that the hackers may still control certain user accounts and may use those to influence prices in the meantime. We will monitor the situation closely. But we believe with withdrawals disabled, there isn’t much incentive for hackers to influence markets.
In this difficult time, we strive to maintain transparency and would be appreciative of your support.
PS, I (CZ) will continue the previously scheduled Twitter AMA in a couple of hours.
- CZ

Baltimore City IT (BCIT) Down And The City Is Still Immobilized Due To Ransomware Attack, On Second Day Now.

City of Baltimore is under a Ransomeware attack on the city's computer systems and the systems are still frozen after 24 hours.
It looks like the RobinHood virus is responsible for the attack and these usually enter the computer systems through a link or attachment in an email.
According to information acquired by Baltimore newspaper, Baltimore brew;

“The city has had trouble keeping its computers updated with the latest security patches and also does not have centralized security incident monitoring, The official spin will be that there is nothing the city could have done to prevent this. But the root cause is failure to keep their computers updated and failure to detect entry of malicious programs into their network.”

Yesterday City said that every effort is on bringing the services to normal;

“We have a team of folks who are working with others from the state and federal level. They’ve quarantined the problem and are working diligently to bring the systems back on line, Critical city services remain operational,” mayoral spokesman Lester Davis told The Brew, after the malware attack by unidentified hackers began infecting computers at City Hall and other agencies this morning.  

Ransomware is malwareware that locks up a computer network, usually encrypts the storage contents preventing legitimate users from accessing the computer or servers. The attackers then demand a fee (ransom) to provide the keys decrypt the network. Due to it's untracebility the ransom is requested usually in the form of bitcoins or other crypto currency. The RobinHood attackers usually request 3 to 7 bitcoins to decrypt computers or a network and the fee goes up by $10000 per day after the third day.

“The city will not be paying any ransom at all,” Davis declared.

He said he could not predict when the impacted systems would be back online. It seems Baltimore does not have a good disaster recovery plan / system for it's IT network.

Yesterday Baltimore' DPW and Transportation services tweeted the following and they still seem to be down.

The email outage has also taken down phone lines to Customer Support and Services, so for now we're unable to take calls to discuss water billing issues. Sorry for the inconvenience.

— BaltimoreDPW (@BaltimoreDPW) May 7, 2019

Due to Network/email outage BCDOT's following services have been impacted:
1. The impound lots at Pulaski Facility (Main) and Fallsway Facility
2. The Right-of-Way Services Division

We apologize for the inconvenience.

— Baltimore City DOT (@BmoreCityDOT) May 7, 2019