Substack breach exposure, Clop ransomware expansion, Apple Pay 2FA bypass, Hong Kong privacy lawFebruary 8, 2026