Cybersecurity & Privacy

  • October 01, 2026

    Calif. Gov. Pushes For More In Signing Bill Limiting CIPA Suits

    California's governor approved legislation Wednesday to block private litigants from bringing lawsuits under one provision of the California Invasion of Privacy Act, while urging the Legislature to keep working on efforts to expand this ban to include additional website tracking claims under the decades-old wiretap statute.  

  • October 01, 2026

    Calif. AG Latest To Subpoena OpenAI Over Hacking Risks

    California Attorney General Rob Bonta revealed Thursday that he has served an investigative subpoena on OpenAI as part of his office's broader probe into cybersecurity risks posed by the company's artificial intelligence models, including a recent incident where its autonomous AI agents hacked third-party platform Hugging Face. 

  • October 01, 2026

    Judge Should Penalize Meta $40B In Latest Trial, NM Argues

    The state of New Mexico asked a judge Thursday to penalize Meta $35 billion to $40 billion for statements that a jury found grossly misrepresented the social media giant's actual data privacy practices, while Meta argued no harm was proven and the damages should be in the $345 million to $3.45 billion range.

  • October 01, 2026

    Uranium Finance Jury Sees 'I Did A Crypto Heist' Chat

    A federal jury in Manhattan was shown chat threads Thursday that purport to show a cybersecurity consultant saying "I did a crypto heist," in a computer fraud and money laundering trial over what prosecutors say was a short-lived hacking campaign that drained $53 million from crypto exchange Uranium Finance.

  • October 01, 2026

    Fate Of Patent Awards Over $1B Shows Hurdles In Apple Case

    Taction Technology Inc. has secured the largest patent damages verdict in history with a $5.7 billion win against Apple Inc., but it may face an uphill battle to collect, since nearly every previous patent judgment over $1 billion was later reduced or overturned.

  • October 01, 2026

    Zillow Users Can't Sue Over Microsoft Session Replay Tech

    A Washington federal judge has thrown out a proposed class action claiming Zillow used Microsoft browser tracking software that shared users' website activity with third parties, saying Wednesday that the plaintiffs went against a prior court order by inappropriately tacking two new claims onto the latest version of the lawsuit.

  • October 01, 2026

    MLB Can't Bat Ticket Theft Suit To Arbitration, Judge Says

    A New York federal judge denied a Major League Baseball unit's bid to compel arbitration in a proposed class action over digital security breaches that allegedly led to the disappearance of game tickets from the MLB app, finding it failed to show plaintiffs agreed to terms containing the arbitration clause.

  • October 01, 2026

    Google Ad Tech MDL Teed Up For Trial Largely Intact

    Gannett, the Daily Mail and a certified class of website publishers scored a major win with a New York federal court ruling largely refusing to let Google scrap antitrust allegations targeting its advertising placement technology business in sprawling multidistrict litigation.

  • October 01, 2026

    CFPB Couldn't Verify Security Of Tech Left In Offices, IG Says

    The Consumer Financial Protection Bureau left computer equipment sitting in its now-closed regional offices for more than a year and a half without confirming that the hardware, and any sensitive material on it, was locked down, a federal watchdog said Thursday.

  • October 01, 2026

    Meta Beats Calif. Drivers' DMV Data Collection Suit

    A California federal judge has thrown out a proposed class action alleging Meta Platforms Inc. illegally obtained information from the state's Department of Motor Vehicles through its Pixel software, saying the plaintiffs leading the complaint haven't shown that Meta got any personal or embarrassing information.

  • October 01, 2026

    Buchalter Data Breach Exposed Calif. Hospital Patient Data

    California-based Buchalter PC suffered a data breach in August that exposed a limited amount of personal information belonging to patients at Los Angeles-area hospital Arrowhead Regional Medical Center, according to a letter Arrowhead sent Monday to affected individuals.

  • October 01, 2026

    Ga. Clients Can't Recoup Deal Funds After Law Firm Hack

    A Georgia federal judge has ruled that two former plastics plant workers are not entitled to receive a settlement in a discrimination case after a third party hacked their counsel's email system and duped defense counsel into wiring the settlement funds to the wrong bank account.

  • October 01, 2026

    Ga. Official Defeats DOJ Bid To Force Handover Of Voter Info

    A federal judge threw out a U.S. Department of Justice suit seeking to force Georgia Secretary of State Brad Raffensperger to hand over an unredacted copy of the state's voter registration list, unpersuaded by the federal government's claims that the state's failure to produce the records was unlawful.

  • October 01, 2026

    Trump Announces Judicial Noms For 5th Circ., NC

    President Donald Trump announced Thursday that he's nominating Todd Butler, a managing partner at Phelps Dunbar LLP, to serve as a judge on the Fifth Circuit. 

  • September 30, 2026

    9th Circ. Judges Doubt X's Claims Against Anti-Hate Group

    Ninth Circuit judges appeared skeptical Wednesday of X Corp.'s bid to revive claims against two nonprofits for scraping tweets to study online hate speech, with one judge questioning X's contract damages claim and another doubting that the nonprofits could be held liable for publishing true information.

  • September 30, 2026

    Senate Panel Seeks To Hold AI Giants Liable For Rogue Hacks

    Several U.S. senators made a bipartisan push Wednesday to impose both civil and criminal liability on the makers and users of advanced artificial intelligence models for the misuse of these systems, arguing that such a move would give these companies more incentive to combat cyberattacks carried out by rogue AI agents and other potential harms. 

  • September 30, 2026

    Parler Ex-CEO Makes Final Trial Pitch For $100M Damages

    The former CEO of social media site Parler made his final argument Wednesday that he was wrongly stripped of a stake worth up to $100 million, with his lawyer telling a Nevada jury a valuation finding the entire company worth $10.81 was "bunk."

  • September 30, 2026

    7th Circ. Backs Truckers In Union Pacific BIPA Suit

    A Seventh Circuit panel on Wednesday affirmed that fingerprint scans at Union Pacific's Illinois facilities violated a state privacy law, rejecting the company's stance that a government contractor exception applies anytime the contract is active.

  • September 30, 2026

    Email Feud Tied To Brothers' Cannabis Venture Heads To Trial

    A contentious legal battle between a pair of siblings who once co-owned cannabis businesses is heading to trial, a Michigan federal judge said Wednesday, ruling that there are genuine questions about one brother's downloading of the other's emails that require a jury trial to resolve.

  • September 30, 2026

    Meta Fights 'Monster' Proposed $1.1B CIPA Judgment

    Meta has urged a California federal judge not to grant a partial final judgment of more than $1.1 billion against it for unlawfully obtaining sensitive data from users of the menstrual tracking app Flo, saying the judgment it criticized as "Frankenstein's monster" violates its due process rights.

  • September 30, 2026

    DraftKings Uses AI To Exploit Losing Bettors, Suit Alleges

    DraftKings weaponizes artificial intelligence to identify vulnerable gamblers who tend to lose and then deploys promotions enticing those gamblers to place more bets to increase the house's revenue, according to a proposed class action filed Wednesday in Massachusetts federal court.

  • September 30, 2026

    FCC OKs Cable Biz Waiver To Fix Banned Routers

    The Federal Communications Commission has come through with another waiver that will allow certain companies to make changes to foreign-made routers that the agency has banned from being imported, in the hopes of avoiding the supply chain shortages that the ban created.

  • September 30, 2026

    23andMe Beats Calif.'s Bankruptcy Sale Privacy Challenge

    A Missouri federal judge on Tuesday denied California's bid to undo the $305 million bankruptcy sale of 23andMe over concerns that the sale sidestepped state consumer data protections, ruling that the state lacks standing to challenge the sale and that the court's "good-faith" findings aren't clearly erroneous.  

  • September 30, 2026

    Google Looks To Toss 'Implausible' Amended AI Spying Action

    Google is seeking to permanently end the third iteration of a proposed action alleging its "Smart Features" unlawfully give Gemini AI access to users' private correspondence, asserting Google's privacy policy allows it to automatically collect such communication data.

  • September 30, 2026

    Benefits Firm Can't Knock Out Data Breach Suit

    A Georgia federal court on Wednesday narrowed, but refused to dismiss, a proposed class action accusing a human resources services firm of failing to safeguard customer information ahead of a 2024 data breach.

Expert Analysis

  • AI Prompt-Injection Hacking Creates Emerging Legal Risks

    Author Photo

    Last month, the first decision sanctioning a prompt-injection attack aimed at a U.S. court highlights the risks that this tactic — attempting to manipulate artificial intelligence systems by hiding invisible instructions in a document — poses for trade secrets, patent prosecution and other areas, say attorneys at Kilpatrick.

  • Scope Issues For Cos. To Consider Ahead Of Cyber Rules

    Author Photo

    As the Cybersecurity and Infrastructure Security Agency finalizes its proposed Cyber Incident Reporting for Critical Infrastructure Act rules, organizations can take steps to navigate the uncertainty that stems from inconsistent critical infrastructure sector definitions and overlapping sector boundaries, say attorneys at Wiley.

  • What Nonbank Lenders Should Watch In 'Open Banking' Redo

    Author Photo

    Nonbank mortgage lenders should prepare for several key changes in the Consumer Financial Protection Bureau's anticipated open banking rule rewrite that could reshape verification costs, vendor relationships and loan workflows, says Kara Ward at Baker Donelson.

  • 10 Ways To Avoid Privacy Risks Revealed In AI Notetaker Suits

    Author Photo

    Litigation claiming Otter.ai trained its AI-powered transcription tool on user conversations and a recent complaint alleging Granola’s notetaking bot joined video calls unbeknownst to participants show companies should assess these technologies as communications-capture tools with privacy and wiretap risks, says Jennifer Ruehr at Hintze Law.

  • Series

    Taekwondo Makes Me A Better Lawyer

    Author Photo

    Taekwondo has taught me to recognize when to fight for a position and when to focus on finding a solution, and that the best outcomes are often achieved by solving problems — all of which has improved my work as a bankruptcy lawyer, mediator and Subchapter V trustee, says Amy Denton Mayer at Berger Singerman.

  • What To Know As Legal Duty To Consider AI Takes Shape

    Author Photo

    While the U.K. Jurisdiction Taskforce’s recent statement on liability for artificial intelligence harms is nonbinding for both U.K. and U.S. lawyers, it highlights the importance of being able to distinguish between the availability of a tool and a professional obligation to use it, say Jonny Frank and Michael Costa at StoneTurn.

  • How FCC Covered List Blitz Is Sidelining Commerce Dept.

    Author Photo

    The swath of recent Federal Communications Commission rulemakings raises serious questions about the purpose and future of Commerce's Office of Information and Communications Technology and Services, and how the U.S. government will go forward in imposing national security regulation on domestic applications of adversary-linked technologies, says Peter Jeydel at Troutman.

  • Amazon v. Perplexity Ruling Limits CFAA Reach Over AI Tools

    Author Photo

    The Ninth Circuit's recent decision in Amazon v. Perplexity provides important early guidance on how the Computer Fraud and Abuse Act applies to agentic artificial intelligence, and is the latest in a line of rulings in which courts have declined to stretch existing statutes to broadly regulate AI, say attorneys at Ropes & Gray.

  • CFPB Complaint Portal Overhaul Signals Changing Priorities

    Author Photo

    The Consumer Financial Protection Bureau's updates to its consumer complaint portal and decision to cease publishing consumer complaint narratives should be viewed by companies as one component of a larger recalibration of how the CFPB collects information and allocates its supervisory and enforcement resources, say attorneys at Cooley.

  • Series

    Being In A Band Made Me A Better Lawyer

    Author Photo

    Playing shows in storied New York City venues and rehearsing with my bandmates in poorly ventilated rooms helped develop the professional qualities I rely on as a litigator, including an ability to collaborate with strong-minded equals and the determination to treat each client with singular focus, says Eliad Shapiro at Herrick Feinstein.

  • Rethinking Corporate Travel Rules After Device Search Cases

    Author Photo

    A recent New York federal court decision approving a warrantless seizure and search of company laptops and a pending Georgia federal court criminal case over a phone's data deletion underscore how little protection corporate personnel have at the border, necessitating a review of corporate travel programs, say attorneys at Gibson Dunn.

  • Notable Q2 Updates In Insurance Class Actions

    Author Photo

    After 2026's second quarter, there is more authority rejecting class certification on total loss valuation theories from courts at the federal circuit, federal district and state appellate level — along with a resolution of a novel issue of depreciation on a wildfire claim, says Kevin Zimmerman at BakerHostetler.

  • 6 Key Takeaways From CFIUS Annual Report

    Author Photo

    Attorneys at Simpson Thacher review highlights from the annual report of the Committee on Foreign Investment in the U.S., released to Congress this month, including the launch of the American First Investment Policy and the Known Investor Pilot Program, and the agency's continued focus on enforcement despite its resource constraints.

  • Series

    Law School's Missed Lessons: Surviving A Long Trial

    Author Photo

    Most of law school trial advocacy is geared toward the sprint of trying a short case, but beyond managing a cross-examination or closing argument, effectively handling the marathon of a lengthy trial requires the ability to maintain composure, organization and credibility with the jury, says Mihir Elchuri at Hirschler.

  • AI Chatbot's Medical Claims Highlight Enforcement Risks

    Author Photo

    The Pennsylvania State Board of Medicine's recent lawsuit against Character Technologies, arguing that an artificial intelligence chatbot engaged in the unlicensed practice of medicine, may provide other state licensing boards with a road map for going after AI platforms, and counsel should advise clients to calibrate compliance accordingly, say attorneys at Cooley.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.