Data suggests that employees are working to improve their abilities around artificial intelligence in a workplace environment being transformed by the technology.

IrishJobs has published the results of a report exploring Ireland’s evolving hiring landscape and shifting attitudes across the jobs market. What was discovered is that there has been a significant push among professionals to upskill in AI.

According to the report, which gathered data from more than 500 employers and nearly 1,000 professionals across Ireland, this urge to upskill in AI is being driven by a growing adoption of AI tools and technology in the workplace. 

More than one-third (35pc) of participants have taken steps to enhance their AI skills this year amid the accelerating AI workplace transformation.

With 86pc of contributing professionals confident that their skills will stay relevant over the next three years, the report indicates that the potential impact of AI on the jobs market is expected to take place over the long-term, rather than the short-term. 

Commenting on the findings, Christopher Paye, country director of The Stepstone Group Ireland with responsibility for IrishJobs, said, “Across Ireland, the hiring landscape is evolving at pace, shaped by a combination of economic and geopolitical volatility, accelerating technological change and shifting workforce expectations.”

He added, “There is a growing sense of uncertainty around the impact of AI and how this could affect future careers. Professionals in Ireland are responding to these changes by enhancing AI skills and putting an increased emphasis on the value of adaptability in the workplace. 

“Employers, too, have a vital role to play in investing and skilling up their workforce to ensure their people can successfully adapt to these shifts.”

AI recruitment

IrishJobs’ report also found that increased automation in the recruitment process is potentially affecting how candidates experience and engage with recruitment. Almost three-quarters of jobseekers who contributed to the research said it is more difficult to reach the interview stage of the hiring process, while 65pc report that they do not hear back from recruiters beyond an autoreply.

Skills, for both applicants and employers, remain a divisive subject, as 78pc of candidates find that job adverts require more skills than ever before, while skills-matching remains the top hiring challenge for employers. The report suggests this is reflective of a growing disconnect between employers and candidates on the expectations around roles.

Perhaps unsurprisingly, salary was found to be the top factor for candidates when considering new opportunities, followed by work-life balance, flexible working and job security. This is in line with rising inflation and cost-of-living pressures. 

With the increased economic uncertainty in mind, 77pc of contributing candidates said that job security is more important than career progression when considering potential opportunities. Meanwhile, 23pc of employers are struggling to meet jobseekers’ rising salary expectations, leading to one of the biggest hiring challenges for recruiters.

“The findings also spotlight a growing disconnect between employers and candidates across several key areas. Challenges around rising salary expectations, skills-matching and increasingly complex job requirements are contributing to friction in the hiring process,” said Paye. 

“To stay competitive, employers need to sharpen their approach, setting clear and realistic expectations from the outset of the recruitment process and leading with transparency on pay, flexibility and career development. Those who actively invest in skills and support employees through the significant change ahead will be best placed to attract and retain high-calibre talent.”

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Marta M Elvira of the University of Navarra, Nils Neumann of the University of Michigan and Olivier Godechot of Sciences Po discuss the impact of a city’s financial market on the wider landscape.

Try to imagine the history of New York without Wall Street, or London without the City. It’s not easy.

Hosting a country’s main financial markets shapes a city’s identity, raises its profile and creates jobs. But there are trade-offs. By acting as a magnet for high-paying finance jobs and related professions, many financial cities suffer from particularly high levels of income inequality.

In fact, alongside globalisation and the clustering of highly skilled workers, our research has found that the presence of a financial market is a major driver of the growing concentration of top earners and earnings inequality in select cities.

In a study conducted by two-dozen researchers, we examined top earnings in cities in 10 countries across Europe, North America and Asia, analysing two decades of linked employer-employee data.

For every country studied, we compare two cities: the financial hub housing the main national markets and related industries, and a second, comparison city that is closest in terms of population, employment and share of GDP.

In the US, for instance, we compared New York to Los Angeles. In Spain, we compared Madrid to Barcelona; in Japan it was Tokyo and Osaka; in France, Paris and Lyon; the Netherlands, Amsterdam and Rotterdam – and so on.

We wanted to understand whether the earnings of the top 1pc were increasing, whether higher earners were clustered in certain cities, and what role the finance sector plays in determining income inequality.

A richer, more concentrated top 1pc

Across all 10 countries, the earnings share of the top 1pc (ie how much of the total income went to those one percenters) increased over time, growing by an average of 0.17pc per year. Countries such as Denmark and Sweden experienced the smallest rises, while the US posted the largest.

That is the aggregate for top earners: already high incomes increasing year after year. Our findings are consistent with data documenting the global increase in income inequality. But where do these high-flyers live and work?

In all of the countries we studied, the highest earners nationwide were more concentrated in financial cities than in the second cities. In 1990, earnings in financial cities were on average 1.7 times more likely to be in the national top 1pc than those in comparison cities. Nearly two decades later, they are 2.4 times more likely.

Financial hubs were consistently responsible for an outsized percentage of the income growth among very top earners. On average, financial cities accounted for 65pc of the increase in their countries’ top 1pc earnings shares. In France, Spain and Sweden, financial cities accounted for more than 100pc of the increase, meaning that earnings in other cities actually declined.

The growing gap between financial and comparison cities is mainly driven by the surge in earnings in the financial sector. We estimate that this sector accounts for 30pc of the divergence between the two types of cities.

Centralised economies

The research’s two-decade-long timeframe helps interpret the trend. In the 1990s, many finance firms distributed ballooning profits among their employees, pushing salaries skyward.

As another of our studies has shown, even when banking profits took a hit – during the 2008 crisis and its aftermath, for instance – salaries remained high. This was even the case when countries enacted specific regulations like capping bonuses to curb salaries in the sector and discourage risk-taking.

Broader national contexts – including overall income inequality levels and how centralised and diversified economies are – also make a difference.

In countries such as Spain, Sweden and Denmark, financial cities contributed substantially to relatively modest increases in overall top 1pc earnings shares. In contrast, in Germany, the US and Canada, financial cities played a smaller role in much larger aggregate increases in national top earnings.

Sweden, Norway and Spain are generally more centralised economies than Germany, Canada or the US, so their financial hubs naturally play a larger role.

Additionally, in North America, finance’s wage-setting practices have spread to other sectors such as tech. Meanwhile, in Scandinavian countries, finance has remained a niche sector, with exceptionally high wages but limited spillover into other sectors.

Financialisation, globalisation and skills

Some 75pc of European Union citizens live in cities and urban areas, a figure set to rise to 78pc by 2050. Around the world, cities are expanding.

This makes it vital to understand what makes them the way they are. Globalisation is often blamed for income inequality in cities because cities provide the high-paying professional infrastructure – the consultants and lawyers as well as the bankers – for global business. Our research shows that some of the cities with the largest surge in earnings concentration are places like Stockholm and Madrid – important European capitals but not centres of global commerce.

Another suggested cause for income inequality is that highly educated workers and productive firms cluster in amenities-rich cities. But our research carefully paired cities with similar amenities and skill levels. In every case, the financial city contributed disproportionately to top earnings, and the other did not.

It is therefore safe to say that the presence of a financial sector is the determining factor in income inequality. This finding has profound implications for the sorts of cities, and societies, we want to create.

By Marta M Elvira, Nils Neumann and Olivier Godechot

Marta M Elvira

Marta M Elvira is a full professor of strategic and people management, for the IESE Business School at the University of Navarra. There, she has served as vice-dean of research and is a member of the management committee in Madrid, as well as holding the chair of family business. She has a PhD in organisational behaviour and labour relations from the Haas School of Business at the University of California, Berkeley and a degree in economics from the University of Oviedo. 

Nils Neumann

Nils Neumann is a graduate student of sociology at the University of Michigan. His main interests lie in how market and organisational dynamics can shape economic inequality.

Olivier Godechot

Olivier Godechot is a professor in sociology at Sciences Po. He is also a director at AxPo Observatory of Market Society Polarisation.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Identity security is under growing strain. The passwords, multi-factor authentication (MFA) responses, IP reputation, geolocation and browser characteristics organizations have traditionally used to judge whether a login is legitimate are becoming easier for attackers to steal, imitate or work around.

AI is adding to that pressure, not by creating a completely new class of attack, but by making familiar identity attacks faster and more efficient. Meanwhile, rotating IP addresses and disposable browser profiles make malicious logins harder to distinguish from legitimate ones.

Against this rapidly evolving threat landscape, organizations need effective Zero Trust measures that protect against ‘legitimate’ logins from attacker-controlled infrastructure. It’s here that device trust helps, ensuring that valid credentials are insufficient without the device context they were meant to be used from.

The Industrialization of Account Takeover Attacks

AI has not created a fundamentally new form of account takeover. Attackers still rely on familiar techniques: phishing, credential theft, MFA abuse, session hijacking and social engineering. What has changed is the amount of manual work needed to run those attacks effectively.

Threat actors can create and send thousands of convincing phishing emails with little effort. If a more personalized message is needed, AI can pull public information from across the internet to build a detailed profile of the target.

Attackers can then adapt their message to match the target’s language and business context. A finance employee might receive a supplier-related request, while an administrator is approached with a cloud access issue.

None of this means AI is autonomously running the entire intrusion. In most cases, people still choose the targets, control the infrastructure and decide what to do with successful access.

The more accurate way to describe the change is that AI compresses the human work between acquiring information and acting on it. It lowers the cost of personalization and triage, allowing teams to run more campaigns and focus their effort on accounts with the highest expected value.

Where Traditional Trust Signals Are Falling Short

Identity platforms often combine several signals to decide whether a login should be trusted. Each still has value, but attackers increasingly know how to steal, imitate or bypass the evidence these controls rely on.

Credentials

While passwordless options are becoming more popular, credentials are still required in most authentication flows. As such, phishing and credential-harvesting malware like infostealers form the first step in many account takeover attacks.

Attackers can also simply reuse credentials from previous breaches. In an incident earlier this year, IGN’s Twitch stream was hijacked by an unknown attacker, using Restream.io credentials that had sat in infostealers dumps for roughly a month before being exploited.

The attack highlights the importance of scanning for leaked credentials. Solutions such as Specops Password Auditor carry out a read-only scan of your Active Directory to identify leaked passwords and related vulnerabilities.

You’ll then receive an easy-to-understand report to help you prioritize fixes. Download Specops Password Auditor for free here.

MFA

MFA significantly improves security, but its strength depends on the method and the surrounding authentication flow.

One-time codes can be captured through phishing. Push notifications can be abused through repeated prompts or social engineering. Adversary-in-the-middle phishing can relay credentials and MFA responses to the legitimate service in real time.

Attackers may also steal session cookies after authentication and avoid the MFA challenge entirely.

IP Address and Geolocation

IP reputation can identify connections from known malicious infrastructure, while geolocation can flag activity from an unexpected region.

However, attackers can route traffic through residential proxies, mobile networks or compromised systems. They may choose an exit node close to the victim, making the login appear geographically plausible.

Legitimate activity is equally difficult to interpret. Remote work and corporate VPNs can produce unfamiliar locations. Stricter policies may block more attacks, but they also increase false positives and support work.

NIST’s Zero Trust Architecture guidance reflects this limitation. SP 800-207 states that organizations should not grant implicit trust based solely on physical or network location.

It treats user and device authentication as separate functions that should take place before access to an enterprise resource is established.

Device Binding Adds Another Trust Layer

Most identity controls still depend on credentials that can be presented from almost anywhere. This is why organizations need to extend trust decisions beyond traditional identity signals.

Solutions like Specops Device Trust limit an attacker’s ability to spoof legitimate login attempts and reduce the risk of account takeover by:

1. Tying Access to Approved Hardware

Organizations should be able to register and limit trusted devices, different policies to corporate, personal and third-party hardware.

If the login comes from an unknown device, the identity platform should treat that as a meaningful change in risk. Access shouldn’t be granted simply because the credentials and MFA succeeded.

2. Continuously Evaluating the User and the Device

A successful login should not create permanent trust for the rest of the session. Access should continue to depend on both the user’s identity and the health of their device.

If posture changes, such as through disabling endpoint protection or the device falling out of compliance, the level of access should change.

3. Matching Enforcement to the Level of Risk

Security teams are right to be cautious about adding friction, so device posture policies do not have to make every issue a blocking event.

Depending on the application and the severity of the problem, organizations can reduce privileges or give the user a short grace period to fix the device.

That approach keeps the control proportionate. A missing update should not always be treated in the same way as disabled endpoint protection or a rooted device.

4. Making it Easy for Users to Restore Trust

When access depends on device health, users need a clear way to resolve problems. Self-guided remediation allows employees to fix issues quickly, which reduces disruption while keeping the required security standard in place.

Mitigate the Risk of AI-Enabled Account Takeover with Specops

As AI improves the speed and personalization of account takeover, IT teams need solutions that blunt the effectiveness of those attacks.

While it may be a challenge to identify every malicious login from network signals alone, organizations can make valid credentials insufficient without the device context they were meant to be used from.

If you’re interested in seeing how Specops can help evolve your identity security strategy by bringing device trust into access decisions, contact us today.

Sponsored and written by Specops Software.

One element of the 80s F1 rubber straps that has not carried over to the new collection, though, is the V-shaped grooves on the bottom portion of the original straps. TAG made the 80s rubber straps extra long so surfers and divers could wear the F1s over wetsuits. The V-shaped grooves meant these could easily be cut down to a desired length—particularly useful if you were just going to wear it on the wrist and not in the waves. Clearly, TAG doesn’t want anybody cutting up its new rubber straps.

I’ve wanted a classic original orange TAG F1 for years, and finally managed to pick one up earlier this year, although it is the later WA1213 model. Eddy Burgener, who designed the TAG F1 in the 80s, has stated that bright, popping colors were key to the original collection, and that the models were not, initially at least, thought of as being linked to driving but watersports instead.

Speaking to watch site Hodinkee last year, Burgener said TAG was “trying to create a new style of watches for American surfers, divers, and other young folks heading for the beach,” so the brief was to create a new watch that was fun, colorful, and young, emulating the bright surfboards and the clothes surfers were wearing at the time.

WIRED’s original WA1213 35 mm orange TAG F1 still going strong.

Advertisement

Photograph: Jeremy White

To nail the bright colors, Burgener stated that the case had to be synthetic, which then added the complication of trying to make a diver’s watch using synthetic materials, something that was incredibly difficult at the time. In the end, they settled on a mixture of fiberglass and plastic as the base material for increased hardness and stability.

TAG’s solar F1s now sport a form of bioplastic—a more eco-friendly castor-based polyamide which the brand has named TH-Polylight—replacing the old “Arnite” thermoplastic. As before, this is molded over a steel inner core, making for a sports watch that’s more robust than most plastic-cased equivalents.

If you lost your remote and just got your new one, this is for you.

Using your phone to control your Roku device

renata colella/Shutterstock

Photo credit: Righto
In late 1972 Butler Lampson sat down at Xerox PARC and wrote a short internal memo titled “Why Alto?” He wanted a machine each researcher could claim as their own. Alan Kay had been dreaming of a portable Dynabook for years. Lampson and Chuck Thacker offered him an interim version that would fit under a desk instead. Bob Taylor gave the project its name, and work began that November. By April 1973 the first unit was running, with a Sesame Street Cookie Monster test pattern appearing on its tall portrait screen.

The screen was an unusual 606 by 808 pixels, with each of them entirely independent and controlled by the Alto. No one else came close to creating a display that functioned like a blank piece of paper on its end (right on the edge of your desk). A three-button mouse lay on the edge, beside a detachable keyboard. The main box, about the size of a compact filing cabinet, housed a microcoded CPU running at around 5.8 Mhz, 128 kilobytes of memory, and a 2.5 megabyte detachable disk cartridge. Each Alto cost Xerox a hefty $12,000 in 1973 ($90,257 today).

Sale

GEEKOM Air12 Mini PC, Intel 7505, 8GB Dual-Slot Upgradeable RAM, 256GB SSD

• [Ultra-Compact Mini PC: 25% Faster Single-Core] Measuring just 4.6 x 4.4 x 1.35 inches, this space-saving small pc fits seamlessly into any office…
• [Dual-Channel RAM & NVMe SSD Expandability] Pre-equipped with 8GB DDR4 RAM and a fast 256GB NVMe SSD to supercharge your daily productivity. Unlike…
• [48EU Intel UHD Graphics: Double the EUs of N100/N150] Features Intel UHD Graphics with 48 Execution Units (EUs)—double the graphics cores of…

PARC researchers immediately filled their offices with Alto machines by the dozens. By 1975, there were dozens buzzing away under desks across the facility. Users began pointing and clicking rather than entering obscure commands. They changed the documents and saw the final layout on screen before printing them. Charles Simonyi and his colleagues created Bravo, the first word processor that delivered on its promise of what you see is what you get. You could use Laurel to send emails, interact with vector graphics and paint tools, and even construct software with Smalltalk by treating everything as an object capable of communicating with other objects.

Bob Metcalfe and David Boggs used Alto to create a network called Ethernet, which flowed at roughly three megabits per second. Laser printers, pioneered at PARC by Gary Starkweather, sat immediately on the same network, allowing anyone to print a clean page without leaving their desk.

Over the next decade, around 2,000 Altos were manufactured. The majority of them ended up in Xerox offices. A few hundred made their way to universities and research facilities. One even ended up at the White House. However, none of these ever made it into a store catalog. Xerox’s headquarters were a long way to the east, and their definition of success was essentially steady sales of copiers, toner, and drums. A machine that could reduce paper usage appeared to be a threat to their ongoing revenue rather than a beneficial concept. Earlier efforts into large computers had cost the corporation a lot of money. The government’s inspection of Xerox’s dominance in the photocopying business gave them still another reason to be wary about selling a whole new type of computer. Selling a new type of computer also put them at risk of being accused of abusing their position in one market to get access to another.

In December 1979, a young Steve Jobs walked thru PARC as part of a stock deal. He observed the cursor travel under the mouse, jumping between overlapping windows, and subsequently stated that this type of demonstration made all of the other tech feel very evident. Apple’s Lisa and then Macintosh brought the same principles into people’s homes and offices. Charles Simonyi later contributed to the development of Microsoft Word. Ethernet became the standard as local networks began to be wired with it. The visual language of icons, menus, and pointing devices spread like wildfire, making it feel like it was meant to be.

It wasn’t until 1981 that Xerox introduced a commercial version known as the Star, which cost a whopping $16,000 ($58,781 today) and arrived after cheaper machines had already appeared on the market. Sales were poor, but the people who built the Alto had moved on to start new companies.
[Source]

I’ve written a fair bit about Dolby Vision 2 in the past year. From seeing it demoed at Dolby Live at the Park MGM in Las Vegas, to viewing it at a Philips event, and then having a brief chat about LG about what it thinks the future may hold for the HDR format, it’d be fair to say that there’s plenty of opinions flying about.

But within the next few weeks – and if you have a Hisense 2026 TV – you’ll find out what all the fuss has been about.

Or will you?

Perhaps I’m a pessimist by default but my understanding of Dolby Vision 2 has increased with each event I’ve encountered it at, but the one pressing issue that’s not been fully addressed is how you’ll be able to take advantage of having this fancy new feature on your TV – and in effect, it’s whether there’s anything in Dolby Vision 2 to actually watch.

Dolby Vision 2 is a new format. At first we thought it could be an extension that incorporated Dolby Vision, but in several ways it’s completely brand new offering. While there is some backwards compatibility with Dolby Vision in the sense that Dolby’s sequel can take content mastered in the original format and improve it, Dolby Vision 2 has an appetite for new metadata, and newly mastered content is the only way that features such as the Intensity Slider and Authentic Motion will work as intended.

So while there’s some backwards compatibility, and having seen it action, it does produce a better image – especially with mid-range and more affordable TVs – any customer with interest in picture quality will want the TV they’ve bought to fully unleash the potential performance available. And this is where we run into a slight problem.

Where in the world is Dolby Vision 2?

Much like Carmen Sandiego (famously from San Francisco), Dolby Vision 2 has been somewhat elusive. Dolby has announced that Peacock (in the US) will produce content natively in Dolby Vision 2, though from what’s been mooted, this will be live broadcasts.

CANAL+ will have Dolby Vision 2 content through its streaming service – but CANAL+ is French, and obviously, it’s only available in select countries in Europe (and French overseas territories). And then there’s iQIYI, a Asian-based video on demand service, which I hadn’t heard about partnering with Dolby until the Hisense TV announcement.

Advertisement

While that covers North America, parts of Europe and Asia; it’s not an extensive number of partners, and despite the widespread availability of Dolby Vision, you might have expected more to sign up and be a part of the launch. But the lack of support suggests that many are hesitant or waiting to see what happens with Dolby Vision 2.

Advertisement

Where’s Disney’s support for it? Why haven’t Sky in the UK talked about it? What about HBO Max, which – and I stand to be corrected – broadcast this year’s Champions League final in Dolby Vision?

At this moment, content seems to be a trickle rather than a torrent. If I don’t subscribe to Peacock in the US, will the presence of Dolby Vision 2 make me want to sign up for the service? I think that’s unlikely, since what I’d want is not to pay for another service but hold out for the service that I’m paying for to support it.

Advertisement

It doesn’t help that Dolby Vision itself is viewed as a premium HDR format, so despite its widespread availability on many manufacturers’ TVs, you’ll only experience Dolby Vision if you a) buy a 4K Blu-ray player that supports it and b) subscribe to the premium tiers of streaming services.

It would seem that most people aren’t paying for the 4K HDR tier on many streaming services, a situation I find galling since people have invested in 4K TVs, but it potentially means that their exposure to Dolby Vision is small, and that the appearance of Dolby Vision 2 on the scene is not one that’ll be a difference maker to most buyers unless you’re a customer who’s in the know about these things.

Does anyone want to watch in HDR?

Advertisement

It’s not just Dolby that is in this situation either. We’ve heard even less about Samsung’s HDR10+ Advanced until a press release this week about Prime Video adopting support for the HDR format. That in itself would seem to be something of a blow to Dolby that one of the bigger, global streaming services has opted for its rival first.

Of course, HDR10+ Advanced is free to license; and along with that, Amazon and Samsung have a relationship going back to the formation of the HDR10+ Alliance, but HDR10+ Advanced is currently only available on Samsung TVs – which are still no.1 in market share – and take up of HDR10+ Advanced seems to have been even slower than Dolby Vision 2.

Advertisement

I don’t doubt that Dolby Vision 2 will have a beneficial impact on picture quality, but the TV industry as a whole seems less enthusiastic, which does strike me as a little odd. We’ve not heard much about Dolby Vision 2 from TCL, and we’re still waiting for Philips’ TVs to launch.

Given the TV industry’s move to streaming, now seems to be time to invest in these pipelines and deliver content that produces even better viewing experiences.

But despite bursts of news here and there, it’s rather quiet on the Dolby Vision 2 front and rather than being wrapped up warm watching great-looking HDR programming, I’m feeling the breeze and wondering when we’ll really see Dolby Vision 2.

Advertisement

Newly revealed security research found that until recently, marketing tech giant Klaviyo was inadvertently sharing the sign-up information of its new customers, including their passwords, with outside advertisers.

Sam Jadali, a security researcher and co-founder of cybersecurity startup Melurna, told TechCrunch that the web form on Klaviyo’s sign-up page was misconfigured between at least February 2024 through November 2025, though likely longer.

The startup’s tests found that anyone who signed up to Klaviyo using the misconfigured form may have had their sign-up information shared with any of the third-party tech giants and advertisers whose trackers are also embedded on the company’s website.

This sign-up data included the customer’s email address and password, as well as their company’s name, website address, and phone number. This information was shared with advertising and tech giants including Facebook and Google; marketing giant HubSpot; Microsoft and its subsidiary LinkedIn; social media site X, and others.

The startup shared its findings with TechCrunch ahead of its talk at the Def Con security conference in Las Vegas.

Klaviyo confirmed to TechCrunch that it fixed the website bug, but questions linger about the incident, including how many people were affected by the data leak over the years. The Boston-based marketing giant allows its 205,000 paying customers to send advertising campaigns across email, text messages, and other channels. Klaviyo’s website says it manages over seven billion customer profiles.

The bug underscores the data risks that third-party trackers can pose to website users when not using defensive tools, like ad-blockers. Klaviyo is the latest company in recent years to have been caught out by inadvertently sharing data with outsiders.

Website trackers, known as “pixels,” allow website and app owners to collect information about their visitors and users, often for understanding how their apps are used and for identifying bugs. These trackers can be misconfigured to also share personal information entered into any web page that they are on. 

In the past few years, security lapses stemming from misconfigured pixel trackers have resulted in companies filing data breach disclosures and regulators taking enforcement action.

When reached by TechCrunch, Klaviyo spokesperson Danielle Zanatta confirmed that the bug was related to an “application configuration issue.” Zanatta said the number of known individuals affected was fewer than 200 people, “based on our readily available active logs.” Klaviyo would not say how far back it stores logs, or for how long the bug was active on its website.

Klaviyo said it notified the known individuals affected, but would not provide a copy of the communication that the company allegedly shared with affected customers when asked by TechCrunch. 

It’s unclear why the company did not publicly disclose the incident.