Cybersecurity & Privacy

  • October 01, 2026

    Calif. Gov. Pushes For More In Signing Bill Limiting CIPA Suits

    California's governor approved legislation Wednesday to block private litigants from bringing lawsuits under one provision of the California Invasion of Privacy Act, while urging the Legislature to keep working on efforts to expand this ban to include additional website tracking claims under the decades-old wiretap statute.  

  • October 01, 2026

    Calif. AG Latest To Subpoena OpenAI Over Hacking Risks

    California Attorney General Rob Bonta revealed Thursday that he has served an investigative subpoena on OpenAI as part of his office's broader probe into cybersecurity risks posed by the company's artificial intelligence models, including a recent incident where its autonomous AI agents hacked third-party platform Hugging Face. 

  • October 01, 2026

    Judge Should Penalize Meta $40B In Latest Trial, NM Argues

    The state of New Mexico asked a judge Thursday to penalize Meta $35 billion to $40 billion for statements that a jury found grossly misrepresented the social media giant's actual data privacy practices, while Meta argued no harm was proven and the damages should be in the $345 million to $3.45 billion range.

  • October 01, 2026

    Uranium Finance Jury Sees 'I Did A Crypto Heist' Chat

    A federal jury in Manhattan was shown chat threads Thursday that purport to show a cybersecurity consultant saying "I did a crypto heist," in a computer fraud and money laundering trial over what prosecutors say was a short-lived hacking campaign that drained $53 million from crypto exchange Uranium Finance.

  • October 01, 2026

    Fate Of Patent Awards Over $1B Shows Hurdles In Apple Case

    Taction Technology Inc. has secured the largest patent damages verdict in history with a $5.7 billion win against Apple Inc., but it may face an uphill battle to collect, since nearly every previous patent judgment over $1 billion was later reduced or overturned.

  • October 01, 2026

    Zillow Users Can't Sue Over Microsoft Session Replay Tech

    A Washington federal judge has thrown out a proposed class action claiming Zillow used Microsoft browser tracking software that shared users' website activity with third parties, saying Wednesday that the plaintiffs went against a prior court order by inappropriately tacking two new claims onto the latest version of the lawsuit.

  • October 01, 2026

    MLB Can't Bat Ticket Theft Suit To Arbitration, Judge Says

    A New York federal judge denied a Major League Baseball unit's bid to compel arbitration in a proposed class action over digital security breaches that allegedly led to the disappearance of game tickets from the MLB app, finding it failed to show plaintiffs agreed to terms containing the arbitration clause.

  • October 01, 2026

    Google Ad Tech MDL Teed Up For Trial Largely Intact

    Gannett, the Daily Mail and a certified class of website publishers scored a major win with a New York federal court ruling largely refusing to let Google scrap antitrust allegations targeting its advertising placement technology business in sprawling multidistrict litigation.

  • October 01, 2026

    CFPB Couldn't Verify Security Of Tech Left In Offices, IG Says

    The Consumer Financial Protection Bureau left computer equipment sitting in its now-closed regional offices for more than a year and a half without confirming that the hardware, and any sensitive material on it, was locked down, a federal watchdog said Thursday.

  • October 01, 2026

    Meta Beats Calif. Drivers' DMV Data Collection Suit

    A California federal judge has thrown out a proposed class action alleging Meta Platforms Inc. illegally obtained information from the state's Department of Motor Vehicles through its Pixel software, saying the plaintiffs leading the complaint haven't shown that Meta got any personal or embarrassing information.

  • October 01, 2026

    Buchalter Data Breach Exposed Calif. Hospital Patient Data

    California-based Buchalter PC suffered a data breach in August that exposed a limited amount of personal information belonging to patients at Los Angeles-area hospital Arrowhead Regional Medical Center, according to a letter Arrowhead sent Monday to affected individuals.

  • October 01, 2026

    Ga. Clients Can't Recoup Deal Funds After Law Firm Hack

    A Georgia federal judge has ruled that two former plastics plant workers are not entitled to receive a settlement in a discrimination case after a third party hacked their counsel's email system and duped defense counsel into wiring the settlement funds to the wrong bank account.

  • October 01, 2026

    Ga. Official Defeats DOJ Bid To Force Handover Of Voter Info

    A federal judge threw out a U.S. Department of Justice suit seeking to force Georgia Secretary of State Brad Raffensperger to hand over an unredacted copy of the state's voter registration list, unpersuaded by the federal government's claims that the state's failure to produce the records was unlawful.

  • October 01, 2026

    Trump Announces Judicial Noms For 5th Circ., NC

    President Donald Trump announced Thursday that he's nominating Todd Butler, a managing partner at Phelps Dunbar LLP, to serve as a judge on the Fifth Circuit. 

  • September 30, 2026

    9th Circ. Judges Doubt X's Claims Against Anti-Hate Group

    Ninth Circuit judges appeared skeptical Wednesday of X Corp.'s bid to revive claims against two nonprofits for scraping tweets to study online hate speech, with one judge questioning X's contract damages claim and another doubting that the nonprofits could be held liable for publishing true information.

  • September 30, 2026

    Senate Panel Seeks To Hold AI Giants Liable For Rogue Hacks

    Several U.S. senators made a bipartisan push Wednesday to impose both civil and criminal liability on the makers and users of advanced artificial intelligence models for the misuse of these systems, arguing that such a move would give these companies more incentive to combat cyberattacks carried out by rogue AI agents and other potential harms. 

  • September 30, 2026

    Parler Ex-CEO Makes Final Trial Pitch For $100M Damages

    The former CEO of social media site Parler made his final argument Wednesday that he was wrongly stripped of a stake worth up to $100 million, with his lawyer telling a Nevada jury a valuation finding the entire company worth $10.81 was "bunk."

  • September 30, 2026

    7th Circ. Backs Truckers In Union Pacific BIPA Suit

    A Seventh Circuit panel on Wednesday affirmed that fingerprint scans at Union Pacific's Illinois facilities violated a state privacy law, rejecting the company's stance that a government contractor exception applies anytime the contract is active.

  • September 30, 2026

    Email Feud Tied To Brothers' Cannabis Venture Heads To Trial

    A contentious legal battle between a pair of siblings who once co-owned cannabis businesses is heading to trial, a Michigan federal judge said Wednesday, ruling that there are genuine questions about one brother's downloading of the other's emails that require a jury trial to resolve.

  • September 30, 2026

    Meta Fights 'Monster' Proposed $1.1B CIPA Judgment

    Meta has urged a California federal judge not to grant a partial final judgment of more than $1.1 billion against it for unlawfully obtaining sensitive data from users of the menstrual tracking app Flo, saying the judgment it criticized as "Frankenstein's monster" violates its due process rights.

  • September 30, 2026

    DraftKings Uses AI To Exploit Losing Bettors, Suit Alleges

    DraftKings weaponizes artificial intelligence to identify vulnerable gamblers who tend to lose and then deploys promotions enticing those gamblers to place more bets to increase the house's revenue, according to a proposed class action filed Wednesday in Massachusetts federal court.

  • September 30, 2026

    FCC OKs Cable Biz Waiver To Fix Banned Routers

    The Federal Communications Commission has come through with another waiver that will allow certain companies to make changes to foreign-made routers that the agency has banned from being imported, in the hopes of avoiding the supply chain shortages that the ban created.

  • September 30, 2026

    23andMe Beats Calif.'s Bankruptcy Sale Privacy Challenge

    A Missouri federal judge on Tuesday denied California's bid to undo the $305 million bankruptcy sale of 23andMe over concerns that the sale sidestepped state consumer data protections, ruling that the state lacks standing to challenge the sale and that the court's "good-faith" findings aren't clearly erroneous.  

  • September 30, 2026

    Google Looks To Toss 'Implausible' Amended AI Spying Action

    Google is seeking to permanently end the third iteration of a proposed action alleging its "Smart Features" unlawfully give Gemini AI access to users' private correspondence, asserting Google's privacy policy allows it to automatically collect such communication data.

  • September 30, 2026

    Benefits Firm Can't Knock Out Data Breach Suit

    A Georgia federal court on Wednesday narrowed, but refused to dismiss, a proposed class action accusing a human resources services firm of failing to safeguard customer information ahead of a 2024 data breach.

Expert Analysis

  • 11th Circ. Ruling Reflects Shift In Digital Consent Frameworks

    Author Photo

    The Eleventh Circuit's recent decision in Tejon v. Zeus Networks that a browsewrap terms-of-service hyperlink was insufficiently conspicuous to bind a consumer to an arbitration agreement could accelerate a broader industry shift to clickwrap as the baseline for enforceable digital consent, say attorneys at Sheppard.

  • Class Actions At The Circuit Courts: June Lessons

    Author Photo

    In this month's review of class action appeals, Mitchell Engel at Shook Hardy discusses five recent rulings from cases involving allegations of internet data misuse, consumer fraud claims, immigration, insurance and First Amendment violation claims.

  • Justices' FCC Fine Ruling May Weaken Agency Leverage

    Author Photo

    The U.S. Supreme Court's decision in Federal Communications Commission v. AT&T upheld the commission's forfeiture framework as consistent with Jarkesy, but it is also likely to reduce the effectiveness of the commission’s forfeiture proceedings as a collection and deterrence tool, say attorneys at Venable.

  • Ill. Law Firm MSO Bill Clashes With Court Power, Ethics Rules

    Author Photo

    An Illinois bill prohibiting law firms from certain business arrangements with management service organizations, sent to the governor for signature last week, encroaches upon the courts' constitutional powers and goes beyond the Illinois Rules of Professional Conduct in regulating investment in law-related services, says Matthew O’Hara at Smith Gambrell.

  • 3rd Circ. Decision Sheds Light On BIPA Bank Exemption

    Author Photo

    The Third Circuit's recent decision in McGoveran v. Amazon illuminates how courts are extending the Illinois Biometric Information Privacy Act's financial institution carveout beyond banks and insurers to technology vendors and other businesses handling biometric data, a defendant-friendly shift that still casts uncertainty around BIPA's enforcement, say attorneys at Dorsey & Whitney.

  • Constructing AI Compliance Plans As State Laws Diverge

    Author Photo

    With Colorado, Connecticut and the federal government recently announcing wildly different approaches to artificial intelligence regulation, creating a workable compliance program means addressing overlapping obligations using shared systems rather than separate silos, say attorneys at Ogletree.

  • Opinion

    State Courts Must Be Gatekeepers Of Expert Testimony

    Author Photo

    Based on my experience in the state judiciary, emulating federal courts' role as gatekeepers of expert witness testimony would help state court judges maintain the appearance of impartiality and assist juries, thus enhancing the overall confidence people have in their justice system, says Lorie Gildea at Greenberg Traurig.

  • Weighing The Implications Of The Anthropic Export Directive

    Author Photo

    The Trump administration recently issued an export control directive against Anthropic to suspend all access to Fable 5 and Mythos 5 by any foreign national, representing one of the first uses of the regime against a frontier large language model in widespread commercial distribution, says attorney Sohan Dasgupta.

  • Series

    Moshing Makes Me A Better Lawyer

    Author Photo

    Entering a mosh pit is much like entering the practice of law — it is difficult, you have to know both the written and unwritten rules, and conduct yourself according to the expectations of each community, says Christopher Deubert at Constangy Brooks.

  • Why Highly Specialized Experts May Risk Exclusion At Trial

    Author Photo

    Expert witnesses with highly specific areas of focus may be vulnerable to exclusion in court, making it important for attorneys to check how potential witnesses' qualifications can be bolstered by their publications and other professional activities, say Evan Weisberg and Christopher Cunio at Hunton, and Kevin Cahill at FTI Consulting.

  • Steps For Employers After 7th Circ. BIPA Retroactivity Ruling

    Author Photo

    The Seventh Circuit's recent ruling in Clay v. Union Pacific sharply limits per-scan statutory damages theories in pending Biometric Information Privacy Act cases by retroactively applying a 2024 amendment, but employers should not mistake the holding for a broad safe harbor, say attorneys at Thompson Coburn.

  • Trump AI Order: Voluntary Framework, Mandatory Implications

    Author Photo

    President Donald Trump's recent executive order promoting the advancement of artificial intelligence innovation and security establishes a new framework for government collaboration with the AI industry, but its classified benchmarking criteria, prerelease framework terms and operational rules will determine whether it establishes de facto compliance expectations, say attorneys at Ropes & Gray.

  • Defending Against Remote Work Risks During The World Cup

    Author Photo

    With World Cup matches underway, remote work policies and security measures can help employers manage the risks of employees working from sports arenas and other nontraditional locations, including hours-worked compliance, network security and data protection, says Lisa Burton at Ogletree.

  • Drawing A Line Between Settlement Pressure And Extortion

    Author Photo

    U.S. v. Luo, pending in the U.S. District Court for the Southern District of New York, may force courts to address anew when settlement negotiations become criminal extortion, particularly in the age of easily fabricated digital evidence, says attorney Denis Kiely.

  • Colorado's New Chatbot Law May Be Defined By Its Carveouts

    Author Photo

    What makes Colorado's conversational artificial intelligence service law worth close attention is what it leaves out, so a thorough scoping analysis may be as important as compliance planning for companies that develop, license or deploy conversational AI, say attorneys at Eversheds Sutherland.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.