Cybersecurity & Privacy

  • September 29, 2026

    DOJ Puts FCA Target On Health Data Security Lapses

    Government contractors that fail to protect personal health information are on the radar of U.S. Department of Justice officials looking to leverage the False Claims Act, attorneys told attendees at a health law conference in Washington, D.C.

  • September 28, 2026

    Grok-Maker Can't Get Deepfake Suit Paused Or Transferred

    Elon Musk's artificial intelligence company must continue battling a proposed class action brought by women suing over Grok-generated deepfakes of them in sexual situations, a California federal judge ruled Monday, declining to pause or transfer the suit to Texas.

  • September 28, 2026

    Parler Wasn't Worth Much When CEO Was Fired, Jury Told

    A company valuation expert testified Monday in the trial over Parler's 2021 ouster of its CEO that the company had little value at the time and that insider estimates in the hundreds of millions of dollars were "speculation."

  • September 28, 2026

    CyberSec Pro Stole $53M In Uranium Finance Heist, Jury Told

    A prosecutor on Monday told a Manhattan federal jury that a Maryland cybersecurity consultant stole around $53 million in crypto by exploiting software bugs on the decentralized exchange Uranium Finance, while defense counsel argued that the government won't be able to show "whose fingers were on the keyboard."

  • September 28, 2026

    Calif. Governor Vetoes Broad Ban On Sensitive Data Sales

    California's governor has refused to sign off on legislation that would have made the state the latest to restrict the sale and sharing of consumers' geolocation, biometric and other sensitive information, saying the proposed "categorical ban" on these online data practices was "a step too far."

  • September 28, 2026

    CFPB Rips Bid To Ax $43M Debt-Relief Win As 'Frivolous'

    The Consumer Financial Protection Bureau has urged the Seventh Circuit to uphold a more than $43 million enforcement judgment against the former operator of a defunct debt relief provider, defending the agency's lower-court win in a case that has stretched across three presidential terms.

  • September 28, 2026

    Don't Overstep On Submarine Cable License Regs, FCC Told

    The Federal Communications Commission should shy away from implementing regulations for submarine cable landing licenses that would apply a uniform standard to all cable systems regardless of risk, says one of the country's biggest telecom trade groups.

  • September 28, 2026

    WordPress Parent Ducks Extortion But Not Antitrust Claims

    A California federal judge issued a mixed ruling last week in the two-way fight between WordPress parent Automattic and web hosting company WPEngine, dismissing digital extortion claims against Automattic while preserving WPEngine's antitrust allegations, and preserving Automattic counterclaims of trademark infringement but dismissing false advertising accusations.

  • September 28, 2026

    Atlanta Consulting Firm Sued Over May Data Breach

    Aprio Advisory Group LLC was hit with a proposed class action in Georgia federal court by a former employee who said its lax data security measures led to a data breach in May that exposed the personal information of hundreds, if not thousands, of people.

  • September 28, 2026

    Atty's Suit Over His Meme Coin Hack Sent To Arbitration

    A New York federal judge Monday ruled that a crypto-focused attorney must arbitrate his claims that wallet provider Phantom Technologies Inc. enabled the hack that stole half a million dollars from his dog-themed meme coin project.

  • September 28, 2026

    Al-Qaida, ISIS Victims Sue Ericsson Over Alleged Payoffs

    American victims of al-Qaida and Islamic State attacks and their families have sued telecommunications provider Ericsson and its CEO, Börje Ekholm, saying the company paid the groups protection money in Iraq and hid the payments from U.S. counterterrorism officials.

  • September 28, 2026

    Roblox, Epic Can't Force Arbitration In Gaming Addiction Suit

    A Pennsylvania federal judge won't let Roblox Corp., Epic Games Inc., Microsoft Corp. and Mojang AB compel arbitration in a suit by a minor alleging that they became addicted to video games, hurting their mental health.

  • September 28, 2026

    DOJ Wants DHS Free To Seek Driver Records Despite Block

    The U.S. Department of Justice asked a Virginia federal judge to clarify that an injunction barring the U.S. Department of Transportation from punishing states over withheld commercial driver's license data doesn't stop other agencies like the U.S. Department of Homeland Security from seeking the records through subpoenas or criminal investigations.

  • September 28, 2026

    Kirkland, White & Case Lead Defense Firm's $1.25B SPAC Deal

    REDLattice and blank check company Bold Eagle Acquisition Corp. said Monday they have agreed to merge in a deal that would take the cyber intelligence company public at a $1.25 billion premoney enterprise value.

  • September 25, 2026

    TikTok To Pay At Least $100M, Curb Teen Use In Alabama Deal

    TikTok agreed to pay at least $100 million and implement usage limits, age verification and other safety measures in a landmark settlement to resolve Alabama's claims the social media platform harmed children and misled users about its safety, the state's attorney general announced Friday.

  • September 25, 2026

    Astrana Health Reveals Spoofing Attack Targeting Private Data

    An Astrana Health unit was the target of a "series" of social engineering cyberattacks in which hackers impersonated the company's employees to gain access to systems that contained private and confidential information about patients and others, the healthcare provider disclosed in a recent regulatory filing. 

  • September 25, 2026

    Ex-Soldier Gets 70-Month Sentence For Telecom Hack Scheme

    A Washington federal judge on Friday sentenced a former U.S. Army soldier to 70 months in prison and ordered him to pay nearly $300,000 in restitution for his role in extorting telecommunication companies by hacking their systems and holding sensitive data hostage for ransom.  

  • September 25, 2026

    Judge Moves Sen. Scott's Tax Info Leak Case To DC Court

    A Florida federal court transferred U.S. Sen. Rick Scott's suit against a former employee of federal contractor Booz Allen Hamilton Inc. for leaking his personal tax returns to D.C. federal court Friday, saying the employee's conduct didn't happen in Florida.

  • September 25, 2026

    9th Circ. OKs Class Cert. In Classmates.com Name Use Case

    The Ninth Circuit has approved a lower court's certification of a class of Californians suing over their names appearing in the yearbooks platform Classmates.com, rejecting a number of challenges from the website's operator, including that the lead plaintiff couldn't adequately represent the class.

  • September 25, 2026

    Cox Can't Recoup $15M In DMCA Suit Costs From Insurers

    A Georgia federal judge backed two insurers in a lawsuit by Cox Enterprises that alleged it was wrongly denied coverage for more than $15 million it racked up in separate litigation with a music publisher, saying the claims were not covered under Cox's policies.

  • September 25, 2026

    Nvidia Wins Stay In AI Voice Data Class Action

    An Illinois federal judge granted Nvidia's motion to stay discovery pending his ruling on its bid to dismiss a suit claiming it used journalists' and voice actors' voices to train its artificial intelligence models without permission, saying the plaintiffs could have sought emergency relief if continued dissemination of the models was an urgent concern.

  • September 25, 2026

    Tarter Krinsky Faces Suit After Disclosing Data Breach

    Tarter Krinsky & Drogin LLP maintained "intentional opacity" about a recently disclosed cybersecurity attack last year that may have compromised protected health information, a proposed class action alleged in New York federal court.

  • September 25, 2026

    Meta Lied About Data Privacy, New Mexico Jury Finds

    A New Mexico jury said Friday that Meta lied willfully on 26 different occasions regarding data privacy, hate speech, misinformation and Facebook's outside investigation of third-party app developers after the Cambridge Analytica scandal.

  • September 25, 2026

    Cold Storage Co. To Pay $5.25M To Settle Data Breach Lawsuit

    Americold Logistics LLC agreed to pay $5.25 million to settle a pair of proposed class actions alleging that lax cybersecurity at the cold storage giant led to two separate data breaches that impacted nearly 225,000 workers.

  • September 25, 2026

    Supreme Court Revives DHS Voter Citizenship Database

    The Trump administration can reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's midterm elections, the U.S. Supreme Court ruled Friday.

Expert Analysis

  • 3 Private Suits Test Influencer Ads As FTC Stays On Sidelines

    Author Photo

    Three lawsuits filed so far this year illustrate how influencer campaigns are facing growing scrutiny from private plaintiffs, despite the Federal Trade Commission not bringing an influencer marketing enforcement action since revising its endorsement guides to address the topic in 2023, but brands can take concrete steps to reduce the risks, says Gonzalo Mon at Kelley Drye.

  • CIPA Tech Tracking Suits Highlight Uncertain Legal Ground

    Author Photo

    Alexandra Samofalova at Spencer Fane discusses the state of California Invasion of Privacy Act website tracking litigation, why credible defendants choose to settle and how the businesses best positioned to face this uncertain legal landscape are the ones treating data practices as a legal compliance matter to address today.

  • Where Is The Line On Actionable Comms In Securities Cases?

    Author Photo

    Recent securities cases demonstrate the difficulty in discerning a clear difference between statements made in connection with the purchase or sale of securities and those that aren't, with that line more likely attributable to individualized factual situations than to any doctrinal differences of opinion between various courts, says Samuel Groner at Fried Frank.

  • House-Passed KIDS Act Spurs Child Data Practices Audit

    Author Photo

    Graham Dean, Brian Roper-Nelson and Will Quick at Brooks Pierce discuss the noteworthy sections of the U.S. House of Representatives' recently passed Kids Internet and Digital Safety Act, the potential revisions as the law moves through the U.S. Senate and the significant business changes that the House law would require.

  • FTC Focus: Enforcing Vertically Integrated Operating Systems

    Author Photo

    As digital platforms increasingly pair operating systems with commerce, advertising, content and data, antitrust scrutiny will turn on whether those integrations create private bottlenecks that foreclose rivals through access, ranking, interoperability or defaults, pushing courts and enforcement agencies to adapt traditional utility and merger frameworks more aggressively, say attorneys at Proskauer.

  • China's New Outbound Investment Rule Reshapes Deal Risk

    Author Photo

    China's new outbound investment regulation introduces broad national security review and penalties, including personal liability, that will necessitate deeper diligence of cross-border deal participants with Chinese ties, earlier regulatory planning and closer attention to sanctions exposure, say attorneys at Freshfields.

  • Calif. Wiretap Ruling May Reshape Pixel Tracking Litigation

    Author Photo

    The recent dismissal of a proposed class action accusing Blue Shield of California of violating the federal Wiretap Act highlights the gap between legacy wiretap laws and modern browser architecture, and the tendency of pixel tracking complaints to oversimplify or mischaracterize how browsers work, says Phil Richards at ThreatHandle Consulting.

  • How State Actions Are Reshaping Surveillance Pricing Risk

    Author Photo

    Amid heightened state enforcement activity and expanding legislative action to curb surveillance pricing concerns related to transparency, fairness and discrimination, businesses should closely examine how consumer data is used in pricing decisions, say attorneys at Steptoe.

  • Series

    Teaching SEC Investigations Makes Me A Better Lawyer

    Author Photo

    Instructing a law school course on U.S. Securities and Exchange Commission investigations has made me a more thoughtful, deliberate practitioner because it requires me to continually reassess and challenge what I know about securities law enforcement, how I know it and how best to explain it, says David Chase at Miami Law.

  • And Now A Word From The Panel: MDL Judge Selection

    Author Photo

    To understand how the Judicial Panel on Multidistrict Litigation selects particular judges to preside over MDL proceedings, it helps to consider not only how much experience on the federal bench a judge has, but also whether they have specifically managed any prior MDLs, says Alan Rothman at Sidley Austin.

  • What Corporate Counsel Can Learn From OpenAI Test Breach

    Author Photo

    The significance of the recent artificial intelligence testing breach involving OpenAI and Hugging Face lies in what it reveals about the path of AI’s evolution, because legal professionals must translate that trajectory into actionable governance, contractual and advisory frameworks, says Jason Mueller at Vorys.

  • Series

    Judges On AI: Examining Administrative, Organizational Uses

    Author Photo

    U.S. District Judge Alan Albright of the Western District of Texas examines how artificial intelligence could transform a court's ability to deal with administrative work and organize materials when preparing for hearings or drafting opinions, thereby affording judges more time to resolve contested issues.

  • Rhode Island Self-Checkout Law Signals National Trend

    Author Photo

    Rhode Island's law limiting self-checkout in retail stores is the first of its kind, but state and local lawmakers across the country are considering similar bills — and if enacted, they could create a patchwork of compliance requirements around issues including staffing, signage and restricted merchandise, says Hannah Flint at Hunton.

  • 4 Cert. Denials Keep Personal Jurisdiction Issues Percolating

    Author Photo

    After the U.S. Supreme Court's decisions in Ford Motor v. Montana and Mallory v. Norfolk Southern Railway expanded limits on personal jurisdiction, the justices' denials this term of four certiorari petitions suggest they are content to let jurisdiction questions brew in lower courts before weighing in, say attorneys at Hunton.

  • Cos. Should Act Now After US Ruling Reopens EU Data Fight

    Author Photo

    The U.S. Supreme Court's recent decision in Trump v. Slaughter may have inadvertently undermined the EU-U.S. Data Privacy Framework, and given the importance of data transfers for U.S. businesses, companies should start preparing for a scenario in which the framework is no longer enforceable, says Fernanda Pires Merouço at Davis Wright.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.