Cybersecurity & Privacy

  • September 28, 2026

    DOJ Wants DHS Free To Seek Driver Records Despite Block

    The U.S. Department of Justice asked a Virginia federal judge to clarify that an injunction barring the U.S. Department of Transportation from punishing states over withheld commercial driver's license data doesn't stop other agencies like the U.S. Department of Homeland Security from seeking the records through subpoenas or criminal investigations.

  • September 28, 2026

    Kirkland, White & Case Lead Defense Firm's $1.25B SPAC Deal

    REDLattice and blank check company Bold Eagle Acquisition Corp. said Monday they have agreed to merge in a deal that would take the cyber intelligence company public at a $1.25 billion premoney enterprise value.

  • September 25, 2026

    TikTok To Pay At Least $100M, Curb Teen Use In Alabama Deal

    TikTok agreed to pay at least $100 million and implement usage limits, age verification and other safety measures in a landmark settlement to resolve Alabama's claims the social media platform harmed children and misled users about its safety, the state's attorney general announced Friday.

  • September 25, 2026

    Astrana Health Reveals Spoofing Attack Targeting Private Data

    An Astrana Health unit was the target of a "series" of social engineering cyberattacks in which hackers impersonated the company's employees to gain access to systems that contained private and confidential information about patients and others, the healthcare provider disclosed in a recent regulatory filing. 

  • September 25, 2026

    Ex-Soldier Gets 70-Month Sentence For Telecom Hack Scheme

    A Washington federal judge on Friday sentenced a former U.S. Army soldier to 70 months in prison and ordered him to pay nearly $300,000 in restitution for his role in extorting telecommunication companies by hacking their systems and holding sensitive data hostage for ransom.  

  • September 25, 2026

    Judge Moves Sen. Scott's Tax Info Leak Case To DC Court

    A Florida federal court transferred U.S. Sen. Rick Scott's suit against a former employee of federal contractor Booz Allen Hamilton Inc. for leaking his personal tax returns to D.C. federal court Friday, saying the employee's conduct didn't happen in Florida.

  • September 25, 2026

    9th Circ. OKs Class Cert. In Classmates.com Name Use Case

    The Ninth Circuit has approved a lower court's certification of a class of Californians suing over their names appearing in the yearbooks platform Classmates.com, rejecting a number of challenges from the website's operator, including that the lead plaintiff couldn't adequately represent the class.

  • September 25, 2026

    Cox Can't Recoup $15M In DMCA Suit Costs From Insurers

    A Georgia federal judge backed two insurers in a lawsuit by Cox Enterprises that alleged it was wrongly denied coverage for more than $15 million it racked up in separate litigation with a music publisher, saying the claims were not covered under Cox's policies.

  • September 25, 2026

    Nvidia Wins Stay In AI Voice Data Class Action

    An Illinois federal judge granted Nvidia's motion to stay discovery pending his ruling on its bid to dismiss a suit claiming it used journalists' and voice actors' voices to train its artificial intelligence models without permission, saying the plaintiffs could have sought emergency relief if continued dissemination of the models was an urgent concern.

  • September 25, 2026

    Tarter Krinsky Faces Suit After Disclosing Data Breach

    Tarter Krinsky & Drogin LLP maintained "intentional opacity" about a recently disclosed cybersecurity attack last year that may have compromised protected health information, a proposed class action alleged in New York federal court.

  • September 25, 2026

    Meta Lied About Data Privacy, New Mexico Jury Finds

    A New Mexico jury said Friday that Meta lied willfully on 26 different occasions regarding data privacy, hate speech, misinformation and Facebook's outside investigation of third-party app developers after the Cambridge Analytica scandal.

  • September 25, 2026

    Cold Storage Co. To Pay $5.25M To Settle Data Breach Lawsuit

    Americold Logistics LLC agreed to pay $5.25 million to settle a pair of proposed class actions alleging that lax cybersecurity at the cold storage giant led to two separate data breaches that impacted nearly 225,000 workers.

  • September 25, 2026

    Supreme Court Revives DHS Voter Citizenship Database

    The Trump administration can reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's midterm elections, the U.S. Supreme Court ruled Friday.

  • September 25, 2026

    DC Circ. Denies Anthropic's Security Risk Suit Against DOD

    A divided D.C. Circuit panel ruled Friday the Pentagon was justified in citing national security concerns to exclude Anthropic's suite of Claude artificial intelligence models from its supply chain.

  • September 25, 2026

    Prediction Market Regulators, Bad Actors In AI Arms Race

    Artificial intelligence is playing an increasingly important role in policing prediction markets, and attorneys say that regulators and investigators are starting to effectively use the same technology that would-be bad actors have leveraged to try to score big with their bets.

  • September 25, 2026

    US Backs Elon Musk In €120M EU Digital Transparency Case

    The U.S. has announced it will join Elon Musk in a bid to overturn a €120 million ($137 million) fine imposed by the European Commission on social media platform X for breaching the bloc's digital transparency rules.

  • September 24, 2026

    Ex-Google CEO's Rape Accuser Can't Undo $12M Arb. Loss

    A California judge on Thursday told a woman who accused former Google CEO Eric Schmidt of sexual assault that he will not vacate a $12 million arbitration award in Schmidt's favor, saying she appeared to have ignored the arbitrator's orders just like she disregarded his own, and asking, "Why did you do that?"

  • September 24, 2026

    Calif. Bill Deals Blow, But Not Knockout, To Tracking Suits

    A California bill awaiting the governor's signature is poised to reduce the swell of litigation under the California Invasion of Privacy Act, but the narrow scope of the pending lawsuit ban leaves open other avenues for plaintiffs to target the widespread use of website tracking technologies.

  • September 24, 2026

    Seyfarth Failed To Guard Client Data From Hack, Suit Alleges

    Seyfarth Shaw LLP on Thursday was hit with a proposed class action in Illinois federal court accusing it of failing to protect its current and former clients' personal information after the Chicago-based law firm this month disclosed a recent data breach.

  • September 24, 2026

    TikTok Loses Bid To Trim Kids' Data Privacy Suit In Calif.

    A California federal judge on Thursday refused TikTok's bid to trim claims from a proposed class action alleging that the platform exploits the private information of users under 13, saying at a hearing that the question of whether previous TikTok settlements bar the plaintiffs' claims should be saved for later.

  • September 24, 2026

    Labcorp Inks $2.3M Deal To Resolve Multistate Data Breach

    Labcorp will pay nearly $2.3 million and adopt data security changes under a multistate settlement resolving investigations into a 2019 breach at its former debt collection vendor, a group of state attorneys general announced Thursday.

  • September 24, 2026

    Borrowers Sue Ed. Dept. Over 'Plain Wrong' Credit Reporting

    Student loan borrowers Thursday sued the U.S. Department of Education in Washington, D.C., federal court, alleging it has tarnished hundreds of thousands of consumer credit histories by falsely reporting billions of dollars in discharged loans as still outstanding.

  • September 24, 2026

    AGs Push Congress To Regulate AI But Not Preempt State Laws

    Nearly half the attorneys general in the United States implored Congress in a letter Thursday to "immediately" regulate the artificial intelligence industry and prohibit federal action from preempting state laws, telling U.S. House and Senate leaders that national security is at stake.

  • September 24, 2026

    Pot Co. Planet 13 Sued Over Alleged ID Scan Data Breach

    Nevada-based cannabis retailer Planet 13 scanned thousands of photo IDs belonging to customers entering its Las Vegas store, and the images were subsequently leaked onto the dark web, a proposed class action filed Wednesday in federal court alleges.

  • September 24, 2026

    Bipartisan Senate Bill Aims To Tighten Telecom Cybersecurity

    A bipartisan Senate bill filed Thursday would aim to ramp up cybersecurity in the telecom industry by creating a system for providers and suppliers to voluntarily certify that they meet security standards.

Expert Analysis

  • The Paradoxical Duty To Adopt AI When You Can't Bill For It

    Author Photo

    Both billing for hours saved using artificial intelligence and preserving billable time by not adopting AI may violate rules of professional conduct, but until bar associations' ethics rules catch up to this emerging economic dilemma, firms must decide how to adjust fee structures themselves, says Ines Lassalle at Peyrot & Associates.

  • UCC Digital Asset Update Is Altering Lender, Obligor Diligence

    Author Photo

    The rollout of the Uniform Commercial Code's Article 12 is transforming digital asset secured lending, forcing lenders and obligors to rethink diligence, control, custody, monitoring and contract terms, as well as collateral practices and financing structures, as jurisdictions continue to adopt the amendments, say attorneys at Lowenstein Sandler.

  • 3 Misconceptions About Justices' FCC Fines Ruling

    Author Photo

    The U.S. Supreme Court's June 4 Federal Communications Commission v. AT&T decision rejecting AT&T’s and Verizon’s argument that the commission's forfeiture process violates the Seventh Amendment has yielded three common reactions that misunderstand the decision as a matter of law and how the FCC actually operates, says Samuel Feder at Jenner & Block.

  • How FCA, FCPA Risks Are Shifting As Feds Pull Back

    Author Photo

    As the federal government continues its retreat from white collar enforcement, companies should expect False Claims Act risk to grow through private whistleblower suits and Foreign Corrupt Practices Act scrutiny to shift toward foreign prosecutors, requiring more adaptability as accountability becomes less centralized, says Temidayo Aganga-Williams at Selendy Gay.

  • New State AI Laws Create Dual Misrepresentation Risk

    Author Photo

    As artificial intelligence transparency laws are enacted across the country and the volume and specificity of compliance records increase, companies will be required to speak more often, more precisely and to more audiences about the same systems, compounding the risk of litigation, say attorneys at Cooley.

  • Series

    Cow Horse Makes Me A Better Lawyer

    Author Photo

    Moving an unwilling 800-pound cow while riding a horse at high speed is exhilarating, a little unhinged and, at least for me, a surprisingly effective training ground for litigation — both demand focus, preparation over rigid planning and the willingness to act despite fear, says Ashley Zitrin at Glenn Agre.

  • Fla. Driver Ruling Shows Renewed Focus On Privacy Standing

    Author Photo

    A Florida federal court's recent dismissal of a class action alleging that private driving records had been improperly used in violation of the Driver's Privacy Protection Act suggests that companies defending against privacy class actions in Florida may reconsider Article III challenges at the dismissal stage, say attorneys at Sidley.

  • PowerSchool Data Breach Ruling Underscores PE Liability

    Author Photo

    The recent California federal court decision in PowerSchool, where Bain Capital was unable to dismiss claims relating to a data breach based in part on Bain's preinvestment activities, is an important addition to the line of cases addressing investor liability for acts of a portfolio company, says Mark Kelley at MoloLamken.

  • Unpacking The Take It Down Act's Compliance Ambiguities

    Author Photo

    The Federal Trade Commission’s recent guidance concerning the Take It Down Act suggests that covered platforms should build removal systems immediately and prioritize compliance, but until courts or regulators provide additional clarity, companies will be navigating a statutory framework that is urgent and uncertain, says Laura-Kate Bernstein at ZwillGen.

  • West Coast Health Cos. Must Brace For Federal Enforcement

    Author Photo

    In light of the U.S. Department of Justice's newly established West Coast strike force targeting healthcare fraud across Northern California, Arizona and Nevada, health organizations will need to prioritize knowledge, vigilance and operational discipline to reduce exposure from potentially parallel criminal and civil investigations, says Michael Beckwith at Dickinson Wright.

  • Operational AI Washing: The Next Frontier Of Fiduciary Risk

    Author Photo

    While there are still no final Delaware decisions applying Caremark specifically to artificial intelligence governance failures, previous case law provides a blueprint, so the question for boards is whether their governance architectures will satisfy Caremark when the first cases are decided, say attorneys at Akerman.

  • Checking For AI Errors Is Now A Two-Way Street

    Author Photo

    A handful of recent federal and state cases demonstrate the importance of checking for errors generated by artificial intelligence not only in your own court submissions, but also your opponent's, as well as when catching opposing counsel's AI mistakes could result in an award for attorney fees, says Tamara Barago at Hollingsworth.

  • Series

    The Biz Court Digest: Shoring Up Corporate Law In Maryland

    Author Photo

    Launched more than 20 years ago to improve complex corporate adjudication, Maryland's Business and Technology Case Management Program has been a solid success in some areas, but there always is room for improvement, says Bill Krulak at Miles & Stockbridge.

  • 2nd Circ.'s Embedded Video Ruling May Protect Publishers

    Author Photo

    The Second Circuit's recent decision in Richardson v. Townsquare, dismissing an infringement claim arising from an embedding of a YouTube-hosted interview, reaffirms a potent defense for publishers who regularly use social media platforms' embed functionality, says Amanda Harris at Jassy Vick.

  • Data Collection Push Signals New Era For Bank Compliance

    Author Photo

    An executive order pushing for broad bank collection of beneficiary data and a Financial Crimes Enforcement Network geographic targeting order in Minnesota should prompt financial institutions to run checks on customer diligence and privacy controls, as these directives may be part of a wider compliance shift, say attorneys at Faegre Drinker.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.