Cybersecurity & Privacy

  • December 18, 2025

    OCC Ends Citi Risk Management Resource Review Order

    The Office of the Comptroller of the Currency on Thursday formally ended a 2024 amendment to a previous consent order against Citibank over its risk management practices, with Citibank saying the relevant remediation programs are "nearly at target-state."

  • December 18, 2025

    Arkansas Social Media Safety Law Temporarily Blocked

    Arkansas cannot enforce a state law that bans social media platforms from using algorithms that could cause a user to kill themselves, buy drugs, become addicted to social media or develop an eating disorder, a federal district judge has ruled.

  • December 18, 2025

    FCC Reworks Reg Framework For Low Power TV

    The Federal Communications Commission on Thursday created a new regulatory framework in hopes of advancing the low-power TV industry.

  • December 18, 2025

    Cigna Faces Class Claims Over Vendor Data Breach

    A Cigna customer has filed a proposed class action in Connecticut federal court that blames the insurer for a data breach that affected a support services vendor between October 2024 and January 2025, leading to the data appearing online and leaving customers at risk of identity theft.

  • December 18, 2025

    Pa. Casino Accused Of Ignoring Data-Tracking Opt-Out

    A proposed class action claims the Rivers Casino in Pittsburgh surreptitiously recorded website visitors' browsing and shared it with third parties, including Facebook and Spotify, even if the users chose to "reject" tracking codes, according to the complaint filed in Pennsylvania state court Wednesday.

  • December 18, 2025

    LinkedIn Data Access Settlement Rejected In Antitrust Case

    A California federal court refused to approve a settlement requiring LinkedIn to stop conditioning access to its data interface on rivals agreeing not to use the data for a competing professional social network, a deal that included no damages but up to $4 million in attorney fees.

  • December 18, 2025

    Car Dealer Credit Check Co. Sued Over Breach Affecting 5.8M

    A company that handles credit inquiries for car dealerships is facing a proposed class action accusing it of negligence, following a cyberattack on its systems in October that compromised the personal information of more than 5.8 million people.

  • December 17, 2025

    Late Plaintiff Substitutions Sink Hospital Health Data Suit

    A Pennsylvania federal judge has dismissed a proposed data breach class action against Thomas Jefferson University Hospitals Inc. over the named plaintiffs purported inability to serve as leaders of the suit, ruling that they had two years to find substitutes.

  • December 17, 2025

    Meta Blamed For Teens' Instagram 'Sextortion' Suicides

    The parents of a 16-year-old boy from Scotland and a 13-year-old boy from Pennsylvania blame Meta and Instagram for their children dying by suicide after being "sextorted" through the photo sharing platform, alleging in a lawsuit Wednesday that the social media companies know the app connects predators to children.

  • December 17, 2025

    29 State AGs Want Unified Meta Youth Addiction Trial

    A group of 29 states and their attorneys general is doubling down on a request in California federal court to hold a single, unified trial in their suit claiming Meta Platforms Inc. is designed to addict and harm minors, saying they have now identified another case where such a singular trial was held involving multiple attorneys general's claims.

  • December 17, 2025

    Ill. Judge Grants Transit Co.'s Bid To Arbitrate GIPA Claims

    An Illinois federal judge sent to arbitration a proposed class action claiming those applying to work for a transit services provider were required to divulge family medical history during a preemployment physical in violation of Illinois' genetic privacy law, finding the lead plaintiff had agreed to arbitrate disputes as part of his application process.

  • December 17, 2025

    Ill. Personal Injury Law Firm Sued Over Data Breach

    A Virginia man alleges in a new proposed class action in Illinois federal court that personal injury law firm TorHoerman Law LLC failed to prevent a cyberattack that exposed his private information to criminals, and that the firm didn't report the attack to the affected people for several months.

  • December 17, 2025

    Adderall Telehealth Startup Indicted After CEO's Conviction

    A San Francisco grand jury has indicted California telehealth startup Done Global, alleging it had a role in a healthcare fraud conspiracy that involved submitting false claims to government health programs and distributing $100 million in Adderall and other drugs through subscription services, federal prosecutors said Wednesday. 

  • December 16, 2025

    La. Social Media Law Violates First Amendment, Judge Rules

    Louisiana cannot enforce a new law that restricts minors' access to social media and bans companies from showing them targeted ads because it is likely unconstitutional and would violate their First Amendment rights, a Louisiana federal judge said Monday.

  • December 16, 2025

    Judge Blocks T-Mobile From Using Tool To Scrape AT&T Data

    A Texas federal judge blocked T-Mobile from using a price tool to scrape data from AT&T's website, saying that without a temporary restraining order T-Mobile would likely continue to enter into AT&T's password-protected software without permission.

  • December 16, 2025

    FTC Orders Crypto Firm To Return Losses From $186M Hack

    Blockchain infrastructure company Illusory Systems has agreed to overhaul its data security protocols and return to consumers money it's been able to recover from hackers who stole $186 million in a 2022 cyberattack in order to resolve the Federal Trade Commission's claims the company shirked its cybersecurity responsibilities, the agency said Tuesday. 

  • December 16, 2025

    Mich. Judge Challenges Ex-UMich Coach's ID Theft Defense

    A federal judge on Tuesday pushed back on a former University of Michigan assistant football coach's argument that his alleged use of college students' login information couldn't support aggravated identity theft charges, saying using usernames and passwords to view "private materials" is "illegal."

  • December 16, 2025

    Six Flags Can't Escape Privacy Suit Over Website Tracking

    A California federal judge has refused to release Six Flags Entertainment Corp. from a proposed class action accusing it of illegally allowing third parties to track the browsing activities of visitors to its Cedar Point amusement park website, finding that the plaintiff had sufficiently asserted an array of claims for invasion of privacy, wiretap, fraud and unjust enrichment.

  • December 16, 2025

    Split Pa. Justices Rule Rapist's Google Search Wasn't Private

    The Pennsylvania Supreme Court on Tuesday ruled that evidence the state police collected from Google on searches a convicted rapist conducted online to find his victim were fair game at trial, ruling in a split decision that the defendant did not have an expectation of privacy when using the search engine.

  • December 16, 2025

    Corporate Transparency Act Is Constitutional, 11th Circ. Says

    The Corporate Transparency Act is constitutional because it regulates economic activities with a substantial impact on interstate commerce and doesn't violate protections against unreasonable searches, the Eleventh Circuit said Tuesday, reversing a lower court's decision.

  • December 16, 2025

    Unions Argue Challenge To DOGE's Data Access Is Still Valid

    The Trump administration's claim that a lawsuit against the Department of Government Efficiency is moot is a strategy to avoid litigation, not a legitimate argument, a group of unions told a New York federal judge, saying their challenge to DOGE's data access can proceed because DOGE remains operating.

  • December 16, 2025

    Hagens Berman Sanctioned For Bot Errors In OnlyFans Case

    A California federal judge sanctioned Hagens Berman Sobol Shapiro LLP for submitting four briefs that contained errors blamed on ChatGPT while representing OnlyFans users pursuing proposed class fraud claims against the online platform, tossing the suit but allowing the users a chance to refile.

  • December 16, 2025

    White Atlanta Worker Says EEOC Race Charge Got Him Fired

    A white worker in his 60s claimed in a Georgia federal court suit that the city of Atlanta fired him out of age and race discrimination after he complained to the U.S. Equal Employment Opportunity Commission that his Black and younger colleagues received preferential treatment.

  • December 15, 2025

    Texas AG Says Sony, Other TV-Makers 'Watching You Back'

    The Texas attorney general Monday sued five television manufacturers, including Sony, Samsung and LG, claiming in new lawsuits filed in Texas state court that the companies "are watching you back" and unlawfully harvesting and selling viewers' data.

  • December 15, 2025

    Coalition Slams SSA For Feeding Data Into DHS Database

    More than a dozen consumer advocacy groups are calling on the Social Security Administration to immediately halt its sharing of personal information with the U.S. Department of Homeland Security for citizenship and immigration verification, arguing that the agency can't seek "retroactive authority" for its allegedly "sweeping violation of privacy and voting rights."

Expert Analysis

  • 10 Commandments For Agentic AI Tools In The Legal Industry

    Author Photo

    Though agentic artificial intelligence has demonstrated significant promise for optimizing legal work, it presents numerous risks, so specific ethical obligations should be built into the knowledge base of every agentic AI tool used in the legal industry, says Steven Cordero at Akerman LLP.

  • Series

    Preaching Makes Me A Better Lawyer

    Author Photo

    Becoming a Gospel preacher has enhanced my success as a trial lawyer by teaching me the importance of credibility, relatability, persuasiveness and thorough preparation for my congregants, the same skills needed with judges and juries in the courtroom, says Reginald Harris at Stinson.

  • And Now A Word From The Panel: A New Rule For MDLs

    Author Photo

    With a new federal rule of civil procedure dedicated to multidistrict litigation practice taking effect this month, MDL watchers will be keeping on eye on whether the rule effectively serves its purpose of ensuring that only supportable claims proceed in MDLs, says Alan Rothman at Sidley.

  • Minn. Financial Abuse Law Should Prompt Operational Review

    Author Photo

    A new Minnesota law targeting the financial exploitation of vulnerable adults with an order-for-protection mechanism will affect multiple functions across banking organizations, and in the time remaining in 2025, banks should take action to update any needed workflow and documentation protocols, say attorneys at Winthrop & Weinstine.

  • SEC Penalties Trended Down In FY 2025, Offering 2026 Clues

    Author Photo

    The U.S. Securities and Exchange Commission's settled corporate penalties in fiscal year 2025 show a clear dividing line, as the largest penalties all came before Inauguration Day, a trend that may continue as the types of cases that lead to the biggest penalties seem to be no longer favored by the commissioners, say attorneys at Dentons.

  • Series

    Law School's Missed Lessons: Practicing Client-Led Litigation

    Author Photo

    New litigators can better help their corporate clients achieve their overall objectives when they move beyond simply fighting for legal victory to a client-led approach that resolves the legal dispute while balancing the company's competing out-of-court priorities, says Chelsea Ireland at Cohen Ziffer.

  • A Primer On NYDFS' 3rd-Party Cybersecurity Guidance

    Author Photo

    The New York Department of Financial Services' recently released comprehensive guidance for registrants on managing cybersecurity risks associated with third-party service providers illustrates why proactive engagement by senior leadership, robust due diligence, strong contractual protections and ongoing oversight are essential to mitigating growing risks, say attorneys at McGuireWoods.

  • Series

    The Law Firm Merger Diaries: How To Build On Cultural Fit

    Author Photo

    Law firm mergers should start with people, then move to strategy: A two-level screening that puts finding a cultural fit at the pinnacle of the process can unearth shared values that are instrumental to deciding to move forward with a combination, says Matthew Madsen at Harrison.

  • Considerations When Invoking The Common-Interest Privilege

    Author Photo

    To successfully leverage the common-interest doctrine in a multiparty transaction or complex litigation, practitioners should be able to demonstrate that the parties intended for it to apply, that an underlying privilege like attorney-client has attached, and guard against disclosures that could waive privilege and defeat its purpose, say attorneys at DLA Piper.

  • Series

    The Law Firm Merger Diaries: Making The Case To Combine

    Author Photo

    When making the decision to merge, law firm leaders must factor in strategic alignment, cultural compatibility and leadership commitment in order to build a compelling case for combining firms to achieve shared goals and long-term success, says Kevin McLaughlin at UB Greensfelder.

  • State AGs May Extend Their Reach To Nat'l Security Concerns

    Author Photo

    Companies with foreign supply-chain risk exposure need a comprehensive risk-management strategy to address a growing trend in which state attorneys general use broadly written state laws to target conduct that may not violate federal regulations, but arguably constitutes a national security threat, say attorneys at Wiley.

  • What To Watch As NY LLC Transparency Act Is Stuck In Limbo

    Author Photo

    Just about a month before it's set to take effect, the status of the New York LLC Transparency Act remains murky because of a pending amendment and the lack of recent regulatory attention in New York, but business owners should at least prepare for the possibility of having to comply, says Jonathan Wilson at Buchalter.

  • Opinion

    Despite Deputy AG Remarks, DOJ Can't Sideline DC Bar

    Author Photo

    Deputy Attorney General Todd Blanche’s recent suggestion that the D.C. Bar would be prevented from reviewing misconduct complaints about U.S. Department of Justice attorneys runs contrary to federal statutes, local rules and decades of case law, and sends the troubling message that federal prosecutors are subject to different rules, say attorneys at HWG.

  • Rule Amendments Pave Path For A Privilege Claim 'Offensive'

    Author Photo

    Litigators should consider leveraging forthcoming amendments to the Federal Rules of Civil Procedure, which will require early negotiations of privilege-related discovery claims, by taking an offensive posture toward privilege logs at the outset of discovery, says David Ben-Meir at Ben-Meir Law.

  • Series

    My Miniature Livestock Farm Makes Me A Better Lawyer

    Author Photo

    Raising miniature livestock on my farm, where I am fully present with the animals, is an almost meditative time that allows me to return to work invigorated, ready to juggle numerous responsibilities and motivated to tackle hard issues in new ways, says Ted Kobus at BakerHostetler.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.