The US missed its own XP deadline, FTC can sue companies over data breaches, 900 Canadian Social Insurance Numbers stolen with Heartbleed, and more.