Cybersecurity & Privacy

  • September 24, 2025

    PNC Failed To Protect 740K Users' Data In Breach, Suit Claims

    A proposed class action filed in Pennsylvania federal court Tuesday claims PNC Financial Services suffered a data breach affecting 740,000 customers and should be held liable for not protecting their personal information.

  • September 24, 2025

    Lender Must Face Class Claims It Ignored 'Do Not Call' Asks

    A mortgage lender must face class allegations that it called people without their consent to market its loan products and continued to call people who asked it to stop, a Michigan federal judge has ruled, rejecting the lender's arguments that the proposed class is too vague.

  • September 23, 2025

    Industry Witnesses In Google Ad Tech Case Not 'That Helpful'

    A Virginia federal judge tightened the leash Tuesday on the U.S. Department of Justice and Google fight over the company's advertising placement technology business, expressing dissatisfaction with non-technical industry witnesses testifying about the benefits and costs of a government breakup proposal.

  • September 23, 2025

    Ad Groups Urge Newsom To Veto Calif. Opt-Out Tool Bill

    Four major ad industry groups are asking California Gov. Gavin Newsom to veto a bill that would require browser developers to offer a digital tool enabling consumers to more easily opt out of online behavioral advertising throughout the web.

  • September 23, 2025

    Google, Meta Beat BlueChew Users' Privacy Suit, For Now

    A California federal judge Tuesday dismissed a proposed class action alleging Google and Meta illegally gathered information from website users buying erectile dysfunction medication on BlueChew's website, since BlueChew's revised policy makes clear their personal data consisting of health information would be shared with third parties for advertising purposes.

  • September 23, 2025

    SEC Accuses Russian Man Of Hacking Pump & Dump Scheme

    The U.S. Securities and Exchange Commission hit a Russian national with a civil suit Monday, accusing him of hijacking hundreds of individual consumer brokerage accounts to run a $31 million pump-and-dump scheme with low-volume stocks and options.

  • September 23, 2025

    Cybersecurity Co.'s Projections Were Inflated, Investor Says

    Cybersecurity company Fortinet was hit with a proposed securities class action accusing it of overstating an expected revenue boost related to customer software upgrades, saying its executives knew the projections were unrealistic.

  • September 23, 2025

    This Week In Healthcare Cybersecurity

    Expiring Obama-era cybersecurity legislation, U.K. charges for 'Scattered Spider' breach, and the challenges of 23andMe's bankruptcy. Law360 looks at the week in cybersecurity developments affecting the healthcare industry.

  • September 23, 2025

    Gun Group Misused Buyers' Data For Political Ads, Suit Says

    The National Shooting Sports Foundation Inc. unjustly enriched itself by secretly obtaining the personal data of millions of firearms buyers from warranty registration cards and creating a database it then used to spread tailored political messages, a proposed class action alleges.

  • September 23, 2025

    Minnesota's Deepfake Crackdown Foreshadows Legal Clashes

    Minnesota's law cracking down on deepfake videos aimed at influencing elections has drawn separate court challenges to stop its enforcement, including one by X Corp., offering a glimpse into the hurdles other states and Congress may face as they address the proliferation of digital replicas created with artificial intelligence.

  • September 22, 2025

    Oracle To Secure TikTok Users' Data In Deal To Skirt US Ban

    Tech giant Oracle will be tasked with safeguarding U.S. TikTok users' personal data, and the app's recommendation algorithm will be "retrained" and operated outside the control of TikTok's Chinese parent company under a deal that President Donald Trump is expected to sign this week to avert a shutdown of TikTok, the White House said Monday. 

  • September 22, 2025

    Google Ad Tech Breakup 'Drastic' But Best, DOJ Tells Judge

    A U.S. Department of Justice attorney pressed a Virginia federal judge Monday to break up Google's advertising placement technology business, asserting in opening statements that a divestiture is doable and the only way to fully address Google's monopoly.

  • September 22, 2025

    Meta Can't Ditch Revived Contract Fight Over Scam Ads

    A California federal judge Monday trimmed a proposed consumer class action against Meta Platforms Inc. over Chinese vendors' scam ads on Facebook and Instagram that was recently revived by the Ninth Circuit, tossing for good a negligent failure-to-warn claim, but keeping intact the consumers' remaining contact claims.

  • September 22, 2025

    SEC Sues NC Man For 'Free-Riding' Securities Scheme

    A North Carolina man faces U.S. Securities and Exchange Commission allegations that he systematically gamed certain broker-dealers to engage in a so-called free-riding scheme that enabled him to trade nearly $900,000 worth of securities despite not actually possessing the funds to do so.

  • September 22, 2025

    T-Mobile, Sprint Push DC Circ. To Revisit $92M FCC Fines

    T-Mobile and Sprint are asking the full D.C. Circuit to review a $92 million fine from the Federal Communications Commission over their sale of sensitive user location data with third-party companies, asking for an en banc rehearing of their challenge after a three-judge panel unanimously affirmed the penalty last month. 

  • September 22, 2025

    Parents Want Roblox Grooming Suits Consolidated In Calif.

    Parents who claim their children were groomed and exploited by sexual predators on Roblox's popular gaming platform say their cases should be consolidated and sent to the Northern District of California since their cases are almost identical, according to a recent petition.

  • September 22, 2025

    Tech Groups Ask To Maintain Block On Fla. Social Media Law

    Tech industry organizations and civil rights groups threw their support behind two groups challenging a Florida law banning children 13 and under from social media, telling the Eleventh Circuit the law is an unconstitutional regulation of speech.

  • September 22, 2025

    Experian Asks 4th Circ. To Reverse Arb. Ruling In FCRA Suit

    Consumer reporting agency Experian has asked the Fourth Circuit to overturn a lower court's decision concerning the arbitration of a lawsuit brought by a consumer falsely reported as dead, saying the judge was wrong not to enforce clauses in the consumer's agreement that delegated such decisions to an arbitrator.

  • September 22, 2025

    Barclays Credit Card User Must Arbitrate Meta Privacy Suit

    A Barclays customer must arbitrate his putative class action alleging it discloses his interactions on the bank's website with Meta Platforms Inc. while logged into his Barclays account, after a New York federal judge said Friday his subsequent use of his credit cards supports that he received cardholder agreements containing arbitration provisions.

  • September 22, 2025

    High Court Allows FTC Firing, Will Review Trump's Power

    The U.S. Supreme Court ruled Monday that President Donald Trump can fire Democratic Federal Trade Commissioner Rebecca Slaughter without cause, and it agreed to reconsider limits on the president's authority to remove members of the FTC.

  • September 19, 2025

    EU-US Data Transfer Ruling Delivers Relief But Not Finality

    A recent court decision backing a revamped framework for transferring personal data from the European Union to the United States provided companies with some much-needed comfort after nearly a decade of setbacks although that reprieve might be short-lived as opponents eye a broader challenge to the critical arrangement.

  • September 19, 2025

    Fla. Court OKs $20M Settlement In Fortra Data Breach MDL

    A Florida federal judge gave final approval to a $20 million class action settlement as part of multidistrict litigation over theft of personal information from millions of U.S. citizens in a health data breach tied to a Russian ransomware group.

  • September 19, 2025

    MLB App Breaches Led To Lost, Stolen Tickets, Fan Claims

    Major League Baseball's mobile ticketing app has had systemic security breaches resulting in the disappearance or theft of game tickets throughout the season, with MLB failing to fully acknowledge the problem and leaving fans "in the lurch,'' according to a proposed class action in New York federal court.

  • September 19, 2025

    Treasury Launches Stablecoin Rule Push With Call For Input

    The U.S. Department of the Treasury on Friday asked for public input on key regulatory considerations for stablecoins as it begins crafting rules to govern the stable-value crypto tokens under the recently signed Genius Act.

  • September 19, 2025

    CFPB Union Drops Suit Over DOGE Access To Worker Data

    The National Treasury Employees Union on Friday dropped a lawsuit seeking to block Department of Government Efficiency access to personnel data at the Consumer Financial Protection Bureau, a move that comes as the union assesses next steps in its other, higher-profile challenge to the consumer agency's downsizing.

Expert Analysis

  • Opinion

    Privacy Bill Must Be Amended To Protect Small Businesses

    Author Photo

    While a bill recently passed by the California Senate would exempt a company's use of legally compliant website advertising and tracking technologies from the California Invasion of Privacy Act, it must be amended to adequately protect small businesses, say attorneys at Thompson Hine.

  • Opinion

    The Legal Education Status Quo Is No Longer Tenable

    Author Photo

    As underscored by the fallout from California’s February bar exam, legal education and licensure are tethered to outdated systems, and the industry must implement several key reforms to remain relevant and responsive to 21st century legal needs, says Matthew Nehmer at The Colleges of Law.

  • Unpacking Notable Details From FTC's 'AI Washing' Cases

    Author Photo

    The Federal Trade Commission has brought many cases involving allegedly deceptive artificial intelligence claims over the past couple of years, illustrating overlooked aspects of AI washing generally and a few new types of AI marketing claims that may line up in regulatory crosshairs down the road, says Michael Atleson at DLA Piper.

  • Previewing State Efforts To Regulate Mental Health Chatbots

    Author Photo

    New York, Nevada and Utah have all recently enacted laws regulating the use of artificial intelligence to deliver mental health services, offering early insights into how other states may regulate this area, say attorneys at Goodwin.

  • 'Pig Butchering' Seizure Is A Milestone In Crypto Crime Fight

    Author Photo

    The U.S.' recent seizure of $225 million in crypto funds in a massive "pig butchering" scheme highlights the transformative impact of blockchain analysis in law enforcement, and the increasing necessity of collaboration between law enforcement agencies, cryptocurrency exchanges and stablecoin issuers, says David Zaslowsky at Baker McKenzie.

  • Justices' Age Verification Ruling May Lead To More State Laws

    Author Photo

    The U.S. Supreme Court’s recent Free Speech Coalition v. Paxton ruling, permitting a Texas law requiring certain websites to verify users’ ages, significantly expands states' ability to regulate minors’ social media access, further complicating the patchwork of internet privacy laws, say attorneys at Troutman.

  • E-Discovery Quarterly: Rulings On Relevance Redactions

    Author Photo

    In recent cases addressing redactions that parties sought to apply based on the relevance of information — as opposed to considerations of privilege — courts have generally limited a party’s ability to withhold nonresponsive or irrelevant material, providing a few lessons for discovery strategy, say attorneys at Sidley.

  • How DOJ's New Data Security Rules Leave HIPAA In The Dust

    Author Photo

    The U.S. Department of Justice's recently effective data security requirements carry profound implications for how healthcare providers collect, store, share and use data — and approach vendor oversight — that go far beyond the Health Insurance Portability and Accountability Act, say attorneys at Nelson Mullins.

  • Opinion

    Section 1983 Has Promise After End Of Nationwide Injunctions

    Author Photo

    After the U.S. Supreme Court recently struck down the practice of nationwide injunctions in Trump v. Casa, Section 1983 civil rights suits can provide a better pathway to hold the government accountable — but this will require reforms to qualified immunity, says Marc Levin at the Council on Criminal Justice.

  • Courts Redefining Software As Product Generates New Risks

    Author Photo

    A recent wave of litigation against social media platforms, chatbot developers and ride-hailing companies has some courts straying from the traditional view of software as a service to redefining software as a product, with significant implications for strict liability exposure, say attorneys at Reed Smith.

  • Now Is The Time To Prep For SEC's New Data Breach Regs

    Author Photo

    Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

  • How Banks Can Harness New Customer ID Rule's Flexibility

    Author Photo

    Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

  • Series

    Playing Soccer Makes Me A Better Lawyer

    Author Photo

    Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

  • How Trump Cybersecurity EO Narrows Biden-Era Standards

    Author Photo

    President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

  • Opinion

    The SEC Should Embrace Tokenized Equity, Not Strangle It

    Author Photo

    The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.