CLAIM-2026-10-02-08

Glow Labs began notifying affected organisations on 9 September 2026, twenty days before publishing the report on 29 September 2026.

Why it matters

For a notified organisation, awareness for the purposes of GDPR Article 33 began on 9 September, not on the day the story broke. The notification clock is keyed to the email, not the headline.

Sources

• glowlabs2026pixelleak
• helpnetsecu2026ai