Cybersecurity & Privacy

  • September 16, 2026

    OE Fed Credit Union's $2.3M 'Boilerplate' Breach Deal Denied

    A California federal judge on Wednesday withheld preliminary approval for a $2.3 million settlement over a cyberattack on OE Federal Credit Union, blasting the filing for its "boilerplate language" and "generic statements" and saying it lacked information to determine whether it's a good deal for the consumer class members.

  • September 16, 2026

    FTX Exec's Wife Headed For Spring Campaign Finance Trial

    A Manhattan federal judge on Wednesday set a new trial date for a crypto-lobbyist/attorney turned Republican congressional candidate who's accused of plotting with her husband, jailed former FTX executive Ryan Salame, to take illegal campaign cash from the bankrupt exchange.

  • September 16, 2026

    Parties Clash Over Scope Of GIPA In DNA Test-Taker's Suit

    An Illinois federal judge is weighing whether the state's genetic privacy law protects against disclosing information about people who have taken genetic tests, with a DNA testing company accused of unlawfully sharing such information with Google arguing Wednesday the statute applies only to disclosure of actual test results.

  • September 16, 2026

    State Bank Supervisor Group Issues AI Exam Framework

    The Conference of State Bank Supervisors on Wednesday unveiled a new oversight framework for artificial intelligence at financial firms, rolling out resources aimed at giving state examiners a common roadmap for reviewing how their regulated institutions are deploying the technology.

  • September 16, 2026

    Tenn. Must Face Adult-Entertainment Groups' Age-Check Suit

    A federal judge in Tennessee has ruled that the state must face a suit from free speech advocates, an individual adult-content creator and adult-entertainment industry groups claiming a state law requiring age checks violates their First Amendment rights.

  • September 16, 2026

    Split Conn. High Court Won't Shield Yale Accuser's Name

    In a 4-3 opinion Wednesday, the Connecticut Supreme Court said a trial judge correctly dismissed a sexual assault accuser's emergency 2024 request to remove her name from transcripts in the long-closed criminal prosecution of former Yale student Saifullah Khan, ruling the trial court lost jurisdiction after a jury's 2018 acquittal.

  • September 16, 2026

    McLaren Patients' Web Tracking Privacy Claims Advance

    A Michigan federal judge has allowed patients to move forward with claims that McLaren Health Care Corp. and the Barbara Ann Karmanos Cancer Institute allegedly intercepted their electronic communications and benefited from sensitive health information collected through tracking technology embedded in their websites.

  • September 16, 2026

    SEC Fines Ex-Okta Employees In Insider Trading Case

    Two former Okta sales managers have reached settlements with the U.S. Securities and Exchange Commission to resolve claims that they traded Okta stock on insider information before the company announced that its financial plan for the year needed adjustment.

  • September 16, 2026

    Vanguard Trims But Can't Shake Users' Data Tracking Suit

    A Pennsylvania federal judge tossed federal wiretapping and California invasion of privacy claims brought against investment management company Vanguard in a user class action over third-party tracking and sharing of data, but allowed the plaintiffs to amend the suit while keeping a state-based wiretapping claim alive. 

  • September 16, 2026

    Cyber Insurer Can't Avoid Auto Shop's $4.9M Coverage Suit

    An Illinois state court refused to toss an auto repair company's suit seeking to recover $4.9 million in coverage from its cyber insurer for a ransomware attack, saying the policy doesn't establish that the insurer owes nothing for the loss.

  • September 15, 2026

    Meta Beats Proposed Privacy Class Action Over 'Voiceprints'

    A California federal judge tossed on Tuesday a proposed class action claiming Meta's messaging platforms secretly and unlawfully capture Facebook users' "voiceprints" and related biometric information, finding the plaintiff agreed to let Meta use his personal data when he signed up for an account.

  • September 15, 2026

    Disney Wants Kids' Data Privacy Claims Tossed For Good

    Disney on Monday asked a California federal court to once again throw out a proposed class action claiming it allowed advertisers to illegally collect minors' personal information, pressing for the dismissal of a new version of the complaint just days after YouTube said it had reached a settlement in the case.

  • September 15, 2026

    How States' 'Perry Mason Moment' Led To $17B Meta Deal

    A recent landmark $17.1 billion settlement with Meta Platforms Inc. may have never happened if it weren't for a quick-thinking trial attorney and his close-knit team of lawyers representing 29 states, who worked together to swiftly shift strategies midtrial.

  • September 15, 2026

    Meta's Data Collection From DMV Is Invasive, Calif. Drivers Say

    Golden State drivers seeking to certify two classes over claims that Meta unlawfully obtained information from the state Department of Motor Vehicles' website told a California federal judge Tuesday that they have standing to sue under the Driver's Privacy Protection Act because the collection was invasive, even if it wasn't embarrassing or sensitive.

  • September 15, 2026

    Justices Told DHS Voter Citizenship Database 'Unprecedented'

    The U.S. Supreme Court should reject the Trump administration's bid to reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's election, a voting rights group told the court Tuesday, arguing that the administration unlawfully reinterpreted several statutes to claim that Congress authorized the changes.

  • September 15, 2026

    Cruz Delays FCC Nom's Hearing Amid Calls To Add Dem Pick

    A bevy of civil rights organizations said Tuesday the U.S. Senate should hold off on confirming another Republican to the Federal Communications Commission unless a sitting FCC Democrat is renominated to her post.

  • September 15, 2026

    Burger King Owner Inks $18M Deal In Suit Over $1B Buyout

    Burger King and Popeyes owner Restaurant Brands International Inc. has reached an $18.2 million deal with shareholders who say they were "materially uninformed" about the true value of the company's 2024 $1 billion buyout of fast food franchisee Carrols Restaurant Group Inc.

  • September 15, 2026

    Salesforce Must Face Claims Over Customer Data Breach

    A California federal judge has largely denied Salesforce's bid to dismiss a proposed class action alleging security weaknesses in its cloud platform allowed hackers to steal the personal information of customers and employees of Allianz, Farmers Group and TransUnion.

  • September 15, 2026

    No Pause Needed In Daniel's Law Cases, 3rd Circ. Told

    Atlas Data Privacy Corp. urged the Third Circuit to reject a bid to pause discovery in consolidated litigation over New Jersey's judicial privacy law as the appeals court considers a First Amendment challenge to the statute, arguing the defendant data brokers failed to show irreparable harm.

  • September 15, 2026

    Call Center Seeks Coverage For $5M Adidas Data Breach Deal

    A Wisconsin business process outsourcing company said in federal court that a Chubb unit breached its policy when the insurer refused to cover $5 million the call center paid to Adidas to resolve claims over data breaches that compromised the sneaker giant's customers' personal information.

  • September 14, 2026

    Zumba Video Buyers Seek Initial Nod For $2.7M Privacy Deal

    A certified class of over 4,500 on-demand video purchasers who allege Zumba illegally divulged their personal information to third parties pressed a Florida federal judge to approve a $2.7 million settlement they claim is "in a league of its own" and outpaces prior deals under federal video privacy law.

  • September 14, 2026

    Wash AG Fights T-Mobile's Bid To Undo Data Breach Ruling

    The Washington State Office of the Attorney General asked a King County Superior Court judge to deny T-Mobile's bid for reconsideration of a recent ruling finding it is liable for more than 722,000 violations of a state data breach notification law.

  • September 14, 2026

    Under Armour Can't Duck Suit Alleging Massive Data Breach

    A Maryland federal judge has denied Under Armour's bid to nix a proposed class action alleging a November data breach leaked the personal information of more than 72 million of its consumers and employees, saying the plaintiffs sufficiently claimed the breach caused them harm such as identity theft.

  • September 14, 2026

    Facebook Third-Party Apps Took User Data, Jury Told

    A technology expert testified Monday in New Mexico's data privacy trial against Meta that Facebook third-party app developers "rampantly" farmed user data and that the social media giant closed investigations of dubious developers without action.

  • September 14, 2026

    NY Flags AI Models As Cyber Risk Review Factor For Banks

    A top New York regulator is urging the state's banks and insurers to stay on top of evolving cybersecurity threats, flagging the launch of powerful new artificial intelligence models as the kind of major market development that can necessitate updating their risk assessments.

Expert Analysis

  • House-Passed KIDS Act Spurs Child Data Practices Audit

    Author Photo

    Graham Dean, Brian Roper-Nelson and Will Quick at Brooks Pierce discuss the noteworthy sections of the U.S. House of Representatives' recently passed Kids Internet and Digital Safety Act, the potential revisions as the law moves through the U.S. Senate and the significant business changes that the House law would require.

  • FTC Focus: Enforcing Vertically Integrated Operating Systems

    Author Photo

    As digital platforms increasingly pair operating systems with commerce, advertising, content and data, antitrust scrutiny will turn on whether those integrations create private bottlenecks that foreclose rivals through access, ranking, interoperability or defaults, pushing courts and enforcement agencies to adapt traditional utility and merger frameworks more aggressively, say attorneys at Proskauer.

  • China's New Outbound Investment Rule Reshapes Deal Risk

    Author Photo

    China's new outbound investment regulation introduces broad national security review and penalties, including personal liability, that will necessitate deeper diligence of cross-border deal participants with Chinese ties, earlier regulatory planning and closer attention to sanctions exposure, say attorneys at Freshfields.

  • Calif. Wiretap Ruling May Reshape Pixel Tracking Litigation

    Author Photo

    The recent dismissal of a proposed class action accusing Blue Shield of California of violating the federal Wiretap Act highlights the gap between legacy wiretap laws and modern browser architecture, and the tendency of pixel tracking complaints to oversimplify or mischaracterize how browsers work, says Phil Richards at ThreatHandle Consulting.

  • How State Actions Are Reshaping Surveillance Pricing Risk

    Author Photo

    Amid heightened state enforcement activity and expanding legislative action to curb surveillance pricing concerns related to transparency, fairness and discrimination, businesses should closely examine how consumer data is used in pricing decisions, say attorneys at Steptoe.

  • Series

    Teaching SEC Investigations Makes Me A Better Lawyer

    Author Photo

    Instructing a law school course on U.S. Securities and Exchange Commission investigations has made me a more thoughtful, deliberate practitioner because it requires me to continually reassess and challenge what I know about securities law enforcement, how I know it and how best to explain it, says David Chase at Miami Law.

  • And Now A Word From The Panel: MDL Judge Selection

    Author Photo

    To understand how the Judicial Panel on Multidistrict Litigation selects particular judges to preside over MDL proceedings, it helps to consider not only how much experience on the federal bench a judge has, but also whether they have specifically managed any prior MDLs, says Alan Rothman at Sidley Austin.

  • What Corporate Counsel Can Learn From OpenAI Test Breach

    Author Photo

    The significance of the recent artificial intelligence testing breach involving OpenAI and Hugging Face lies in what it reveals about the path of AI’s evolution, because legal professionals must translate that trajectory into actionable governance, contractual and advisory frameworks, says Jason Mueller at Vorys.

  • Series

    Judges On AI: Examining Administrative, Organizational Uses

    Author Photo

    U.S. District Judge Alan Albright of the Western District of Texas examines how artificial intelligence could transform a court's ability to deal with administrative work and organize materials when preparing for hearings or drafting opinions, thereby affording judges more time to resolve contested issues.

  • Rhode Island Self-Checkout Law Signals National Trend

    Author Photo

    Rhode Island's law limiting self-checkout in retail stores is the first of its kind, but state and local lawmakers across the country are considering similar bills — and if enacted, they could create a patchwork of compliance requirements around issues including staffing, signage and restricted merchandise, says Hannah Flint at Hunton.

  • 4 Cert. Denials Keep Personal Jurisdiction Issues Percolating

    Author Photo

    After the U.S. Supreme Court's decisions in Ford Motor v. Montana and Mallory v. Norfolk Southern Railway expanded limits on personal jurisdiction, the justices' denials this term of four certiorari petitions suggest they are content to let jurisdiction questions brew in lower courts before weighing in, say attorneys at Hunton.

  • Cos. Should Act Now After US Ruling Reopens EU Data Fight

    Author Photo

    The U.S. Supreme Court's recent decision in Trump v. Slaughter may have inadvertently undermined the EU-U.S. Data Privacy Framework, and given the importance of data transfers for U.S. businesses, companies should start preparing for a scenario in which the framework is no longer enforceable, says Fernanda Pires Merouço at Davis Wright.

  • Series

    Being A Singer Makes Me A Better Lawyer

    Author Photo

    Before law school, I spent seven years trying to make it as a professional singer in Los Angeles, and nearly everything I learned about preparation, humility, confidence and more has followed me into my legal practice, says Jessica Caterina at Moses & Singer.

  • Preparing For Next Congress With Eye On Investigation Risk

    Author Photo

    Rod Rosenstein, Brian Whisler and Bruce Linskens at Baker McKenzie offer advice for organizations seeking to build a proactive response plan to potential congressional oversight as the election looms.

  • How Justices Stayed Off The Geofence In Location Data Case

    Author Photo

    The U.S. Supreme Court's recent Chatrie v. United States decision reaffirms Fourth Amendment protections for location data but avoids more complicated questions about geofence warrants, say attorneys at Adams Duerk.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.