Cybersecurity & Privacy

  • September 02, 2025

    3rd Circ. Wants NJ Justices' Input On Judicial Privacy Law

    The Third Circuit on Tuesday asked the New Jersey Supreme Court to address whether the state's judicial privacy law requires a mental state for purported infractions, a question that could prove crucial for data brokers facing dozens of lawsuits over their alleged violations of the statute.

  • September 02, 2025

    TMX Customers Get Final OK For $42M Data Breach Suit Deal

    Customers of title loan and payday lender TMX Finance have gotten a final nod for their $42 million settlement of class action claims arising from a data breach affecting an estimated 4.8 million people, with class counsel receiving just under $6 million in fees and expenses.

  • September 02, 2025

    Ex-Sen. Cory Gardner Takes Reins Of Cable Biz Group NCTA

    Former Colorado Sen. Cory Gardner was named Tuesday as the new president and CEO of cable industry group NCTA – The Internet & Television Association.

  • August 29, 2025

    Google Fights Gemini AI Query As App Privacy Trial Wraps

    A multibillion-dollar trial over claims that Google illegally collected app data from 98 million consumers grew contentious Friday when the plaintiff's lawyer asked the tech giant's expert if he considered using Google's AI tool to see if data Google says is scrubbed of personal information could be re-identified.

  • August 29, 2025

    FCC Reminds Rip-And-Replace Recipients To File Updates

    Telecom carriers that received funding from the "rip and replace" program need to provide a status report to the Federal Communications Commission at the end of September, updating the agency on the progress they've made in removing and replacing allegedly insecure foreign-made equipment from their networks, according to a notice issued Friday.

  • August 29, 2025

    Ohio Cannabis Biz Sued Over Exposing Patient Info

    An Ohio company that helps patients secure medical marijuana cards was hit with a new wave of proposed class actions, accusing it of failing to safeguard nearly a million of its customers' sensitive personal records, with the company now facing at least five lawsuits over alleged lax security.

  • August 29, 2025

    SEC Beats FOIA Suit Over Its Internal Breach

    The U.S. Securities and Exchange Commission was not in the wrong for withholding information related to a 2022 internal information breach from a conservative civil rights organization that requested documents on the matter, a Washington, D.C., judge determined, citing the attorney work-product doctrine.

  • August 29, 2025

    OpenAI Denied Discovery On Musk's Buy Offer, Meta's Role

    A California federal magistrate judge blocked further OpenAI discovery into Elon Musk's $97.4 billion offer to buy the ChatGPT maker amid a lawsuit challenging its attempted shift into a for-profit business, finding that discovery on the offer, and any involvement by Meta and CEO Mark Zuckerberg, must wait.

  • August 29, 2025

    Hegseth Creates Joint Task Force To Counter Drone Threats

    Defense Secretary Pete Hegseth has moved to establish a joint Interagency task force aimed at countering foreign drone threats and promoting sovereignty over U.S. airspace. 

  • August 29, 2025

    Colorado Law Firm Faces Class Action Over Data Breach

    A Colorado law firm was hit with a proposed class action in federal court after a Utah woman claimed that the firm didn't take ample measures to protect the personal information of more than 5,000 people, which was stolen in a data breach earlier this year.

  • August 29, 2025

    Apple Must Hand Swiss User's Records To IRS, Judge Rules

    Apple must provide the Internal Revenue Service with a Swiss user's internet and phone records as part of a criminal investigation by Switzerland's taxing authority, a California federal judge ruled, despite the man's protests that the records are unrelated to taxes.

  • August 29, 2025

    UK Litigation Roundup: Here's What You Missed In London

    This past week in London has seen Prosecco DOC Consortium bring an intellectual property claim against a distributor, the Serious Fraud Office bring a civil recovery claim against the ex-wife of a solicitor jailed over a £19.5 million fraud scheme, and law firm Joseph Hage Aaronson & Bremen LLP sue its former client, the bankrupt Indian tycoon Vijay Mallya. Here, Law360 looks at these and other new claims in the U.K.

  • August 29, 2025

    M&A Attys Hand Tasks To 'Machines' In Careful Embrace Of AI

    Artificial intelligence is no longer just a back-office tool in mergers and acquisitions legal work, but is increasingly embedded in core deal processes that help attorneys manage due diligence, draft agreements and assess risk.

  • August 28, 2025

    NSO's Bid To Slash Meta's $168M Win Faces Skeptical Judge

    A California federal judge appeared skeptical Thursday of NSO Group's bid to slash Meta's $168 million jury win in their spyware fight, saying she's having a "hard time" reconciling NSO's argument for $444,000 as a "substantial" award when its lawyer had called that sum "a mere pittance" at trial.

  • August 28, 2025

    'Still A Mess': Colo. Special Session Fails To Deliver AI Clarity

    During its recently concluded special session, the Colorado Legislature extended the implementation deadline for the state's groundbreaking artificial intelligence law but failed to make any substantial changes to the legislation, leaving companies to face continued uncertainty on the scope of liability and other pressing issues.

  • August 28, 2025

    4chan Says UK Online Censorship Law Is Powerless In US

    Controversial online platforms Kiwi Farms and 4chan have slapped the United Kingdom's Office of Communications with a lawsuit in D.C. federal court, saying the foreign agency has no power to make them comply with a British privacy law that violates their rights under the U.S. Constitution.

  • August 28, 2025

    Fed. Circ. Says AI Co. Not 'Interested Party' In Bid Protest

    The en banc Federal Circuit affirmed on Thursday a lower court's dismissal of Percipient.ai's protest challenging its exclusion from consideration to supply computer vision technology under a $376.4 million National Geospatial-Intelligence Agency procurement, holding that the company lacks standing.

  • August 28, 2025

    Salesforce Hit With Suit Over Alleged Breach Affecting 1M

    The personal information of more than 1 million Farmers Insurance customers was accessed by hackers who breached cloud-based software company Salesforce's databases, according to a proposed class action in California federal court.

  • August 28, 2025

    Unions Urge Judgment Blocking DOGE's Agency Access

    Unions and advocacy groups asked a Washington, D.C., federal judge Thursday for a win before trial in their lawsuit claiming agencies unlawfully provided Elon Musk's Department of Government Efficiency access to sensitive data, saying the agencies departed from their usual data access procedures without explanation.

  • August 28, 2025

    SK Telecom Gets Record Fine For Massive Data Breach

    SK Telecom, the largest wireless carrier in South Korea, was fined a record 134.8 billion won (about $97 million) by South Korean regulators Wednesday after a data breach leaked phone numbers and other identifiers of more than 23 million users.

  • August 28, 2025

    Roblox, Discord Accused Of Failing To Protect 11-Year-Old

    Roblox and Discord have been hit with yet another lawsuit alleging the online platforms aren't safe for children and that they allow predators to groom youth, with the latest complaint filed by a Michigan woman who claims she was only 11 years old when she was exploited by an adult predator.

  • August 28, 2025

    Accounting Firm Sued Over Breach Of Easterseals Data

    A North Carolina-based accounting firm was hit with a class action on Thursday alleging it failed to protect personal information and health data of children, veterans and disabled people entrusted to it by Easterseals Inc.

  • August 28, 2025

    Longtime John Hancock Counsel Joins Prince Lobel In Boston

    Prince Lobel Tye LLP announced that a cybersecurity attorney with over 20 years of experience, including over a decade in-house at insurance company John Hancock, has joined the firm's Boston office as a partner.

  • August 27, 2025

    Google Expert Says Its Disclosures Avoid 'Cognitive Overload'

    Google's user-interface expert witness testified Wednesday in a multibillion-dollar data privacy case that Google's decision not to tell users up front that it collected some information despite an activated privacy switch was "good UI design" that protected users from "cognitive overload."

  • August 27, 2025

    US, Others Warn Of China-Backed Cyber Threats To Networks

    U.S. intelligence agencies and their international partners Wednesday put telecoms, transportation operators and other critical infrastructure providers on high alert about persistent efforts by Chinese state-sponsored hackers to gain long-term access to their essential networks worldwide. 

Expert Analysis

  • Attacks On Judicial Independence Tend To Manifest In 3 Ways

    Author Photo

    Attacks on judicial independence now run the gamut from gross (bald-faced interference) to systemic (structural changes) to insidious (efforts to undermine public trust), so lawyers, judges and the public must recognize the fateful moment in which we live and defend the rule of law every day, says Jim Moliterno at Washington and Lee University.

  • Loophole To Budget Bill's AI Rule May Complicate Tech Regs

    Author Photo

    An exception in the One Big Beautiful Bill Act that could allow state and local governments to develop ostensibly technology-neutral laws that nonetheless circumvent the bill’s ban on state artificial intelligence regulation could unintentionally create a more complex regulatory environment for technologies beyond AI, says Pooya Shoghi at Lee & Hayes.

  • OCC's Digital Embrace Delivers Risk, Opportunity For Banks

    Author Photo

    As the Office of the Comptroller of the Currency continues to release and seek more information on banks' participation in the crypto-asset arena, institutions may see greater opportunity to pursue digital asset and custody services, but must simultaneously educate themselves on transformations occurring throughout the industry, says Kirstin Kanski at Spencer Fane.

  • Remediation Still Reigns Despite DOJ's White Collar Shake-Up

    Author Photo

    Though the U.S. Department of Justice’s recently announced corporate enforcement policy changes adopt a softer tone acknowledging the risks of overregulation, the DOJ has not shifted its compliance and remediation expectations, which remain key to more favorable resolutions, say Jonny Frank, Michele Edwards and Chris Hoyle at StoneTurn.

  • Series

    Law School's Missed Lessons: Appreciating Civil Procedure

    Author Photo

    If you’re like me, law school’s often complex and theoretical approach to teaching civil procedure may have contributed to an early struggle with the topic, but when seen from a practical perspective, new lawyers may find they enjoy mastering these rules, says Chloe Villagomez at Foster Garvey.

  • Appellate Guidance Needed On California Chatbot Litigation

    Author Photo

    There is wide variation in how courts are applying the California Invasion of Privacy Act against website owners that allegedly help third parties spy on visitors via chatbots — and the lack of appellate rulings creates uncertainty, especially as these cases move toward the summary judgment stage, say attorneys at Crowell & Moring.

  • Calif. Bar Exam Fiasco Shows Why Attys Must Disclose AI Use

    Author Photo

    The recent revelation that a handful of questions from the controversial California bar exam administered in February were drafted using generative artificial intelligence demonstrates the continued importance of disclosure for attorneys who use AI tools, say attorneys at Troutman.

  • Platforms Face Section 230 Shift From Take It Down Act

    Author Photo

    The federal Take It Down Act, signed into law last month, aims to combat deepfake pornography with criminal penalties for individual wrongdoers, but the notice and takedown provisions change the broad protections provided by Section 230 of the Communications Decency Act in ways that directly affect platform providers, say attorneys at Troutman.

  • In 2nd Place, Va. 'Rocket Docket' Remains Old Reliable

    Author Photo

    The U.S. District Court for the Eastern District of Virginia was again one of the fastest civil trial courts in the nation last year, and an interview with the court’s newest judge provides insights into why it continues to soar, says Robert Tata at Hunton.

  • CIPA May Not Be Necessary To Protect Ad Tech Plaintiffs

    Author Photo

    A California bill designed to protect businesses from advertising technology claims under the California Invasion of Privacy Act by amending the act retroactively has been highly contested by various consumer advocacy groups, but other existing law may sufficiently protect any plaintiff who suffers actual harm from such tech, says Justin Donoho at Duane Morris.

  • What FCA Liability Looks Like In The Cybersecurity Realm

    Author Photo

    ​Two recent settlements highlight how whistleblowers and the U.S. Department of Justice have been utilizing the False Claims Act to allege fraud predicated on violations of cybersecurity standards — timely lessons given new bipartisan legislation introducing potential FCA liability for artificial intelligence use, say​ attorneys Rachel Rose and Julie Bracker.

  • How Attorneys Can Become Change Agents For Racial Equity

    Author Photo

    As the administration targets diversity, equity and inclusion efforts and law firms consider pulling back from their programs, lawyers who care about racial equity and justice can employ four strategies to create microspaces of justice, which can then be parlayed into drivers of transformational change, says Susan Sturm at Columbia Law School.

  • 5 Takeaways From DOJ's Media Compulsory Process Rules

    Author Photo

    The U.S. Department of Justice’s new rules, making it easier for law enforcement investigating leaks to compel members of the media and third parties to disclose information, could have wide-ranging impacts, from reduced protections for journalists and organizations, to an expanded focus on nonclassified material, say attorneys at WilmerHale.

  • Opinion

    9th Circ. Shopify Decision Gets Personal Jurisdiction Wrong

    Author Photo

    The Ninth Circuit's recent opinion in Briskin v. Shopify, rejecting the differential targeting requirement for personal jurisdiction, not only deviates from long-standing jurisprudence, but it also significantly expands the reach of internet-based claims under California law, says Matthew Pearson at Womble Bond.

  • GAO Report Reveals How Banks And Regulators Are Using AI

    Author Photo

    A U.S. Government Accountability Office report published last month makes clear that while both federal regulators and regulated entities like banks and credit unions are employing artificial intelligence to improve efficiency, they're maintaining some skepticism, say attorneys at Orrick.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.