Cybersecurity & Privacy

  • October 01, 2026

    Buchalter Data Breach Exposed Calif. Hospital Patient Data

    California-based Buchalter PC suffered a data breach in August that exposed a limited amount of personal information belonging to patients at Los Angeles-area hospital Arrowhead Regional Medical Center, according to a letter Arrowhead sent Monday to affected individuals.

  • October 01, 2026

    Ga. Clients Can't Recoup Deal Funds After Law Firm Hack

    A Georgia federal judge has ruled that two former plastics plant workers are not entitled to receive a settlement in a discrimination case after a third party hacked their counsel's email system and duped defense counsel into wiring the settlement funds to the wrong bank account.

  • October 01, 2026

    Ga. Official Defeats DOJ Bid To Force Handover Of Voter Info

    A federal judge threw out a U.S. Department of Justice suit seeking to force Georgia Secretary of State Brad Raffensperger to hand over an unredacted copy of the state's voter registration list, unpersuaded by the federal government's claims that the state's failure to produce the records was unlawful.

  • October 01, 2026

    Trump Announces Judicial Noms For 5th Circ., NC

    President Donald Trump announced Thursday that he's nominating Todd Butler, a managing partner at Phelps Dunbar LLP, to serve as a judge on the Fifth Circuit. 

  • September 30, 2026

    9th Circ. Judges Doubt X's Claims Against Anti-Hate Group

    Ninth Circuit judges appeared skeptical Wednesday of X Corp.'s bid to revive claims against two nonprofits for scraping tweets to study online hate speech, with one judge questioning X's contract damages claim and another doubting that the nonprofits could be held liable for publishing true information.

  • September 30, 2026

    Senate Panel Seeks To Hold AI Giants Liable For Rogue Hacks

    Several U.S. senators made a bipartisan push Wednesday to impose both civil and criminal liability on the makers and users of advanced artificial intelligence models for the misuse of these systems, arguing that such a move would give these companies more incentive to combat cyberattacks carried out by rogue AI agents and other potential harms. 

  • September 30, 2026

    Parler Ex-CEO Makes Final Trial Pitch For $100M Damages

    The former CEO of social media site Parler made his final argument Wednesday that he was wrongly stripped of a stake worth up to $100 million, with his lawyer telling a Nevada jury a valuation finding the entire company worth $10.81 was "bunk."

  • September 30, 2026

    7th Circ. Backs Truckers In Union Pacific BIPA Suit

    A Seventh Circuit panel on Wednesday affirmed that fingerprint scans at Union Pacific's Illinois facilities violated a state privacy law, rejecting the company's stance that a government contractor exception applies anytime the contract is active.

  • September 30, 2026

    Email Feud Tied To Brothers' Cannabis Venture Heads To Trial

    A contentious legal battle between a pair of siblings who once co-owned cannabis businesses is heading to trial, a Michigan federal judge said Wednesday, ruling that there are genuine questions about one brother's downloading of the other's emails that require a jury trial to resolve.

  • September 30, 2026

    Meta Fights 'Monster' Proposed $1.1B CIPA Judgment

    Meta has urged a California federal judge not to grant a partial final judgment of more than $1.1 billion against it for unlawfully obtaining sensitive data from users of the menstrual tracking app Flo, saying the judgment it criticized as "Frankenstein's monster" violates its due process rights.

  • September 30, 2026

    DraftKings Uses AI To Exploit Losing Bettors, Suit Alleges

    DraftKings weaponizes artificial intelligence to identify vulnerable gamblers who tend to lose and then deploys promotions enticing those gamblers to place more bets to increase the house's revenue, according to a proposed class action filed Wednesday in Massachusetts federal court.

  • September 30, 2026

    FCC OKs Cable Biz Waiver To Fix Banned Routers

    The Federal Communications Commission has come through with another waiver that will allow certain companies to make changes to foreign-made routers that the agency has banned from being imported, in the hopes of avoiding the supply chain shortages that the ban created.

  • September 30, 2026

    23andMe Beats Calif.'s Bankruptcy Sale Privacy Challenge

    A Missouri federal judge on Tuesday denied California's bid to undo the $305 million bankruptcy sale of 23andMe over concerns that the sale sidestepped state consumer data protections, ruling that the state lacks standing to challenge the sale and that the court's "good-faith" findings aren't clearly erroneous.  

  • September 30, 2026

    Google Looks To Toss 'Implausible' Amended AI Spying Action

    Google is seeking to permanently end the third iteration of a proposed action alleging its "Smart Features" unlawfully give Gemini AI access to users' private correspondence, asserting Google's privacy policy allows it to automatically collect such communication data.

  • September 30, 2026

    Benefits Firm Can't Knock Out Data Breach Suit

    A Georgia federal court on Wednesday narrowed, but refused to dismiss, a proposed class action accusing a human resources services firm of failing to safeguard customer information ahead of a 2024 data breach.

  • September 30, 2026

    Ohio Parents Say Netflix Hooks Kids For Ad Data

    Netflix falsely marketed itself as a "kid-friendly" streaming alternative to Big Tech platforms while secretly building an addictive surveillance machine around children, Ohio parents have claimed in a proposed class action, which is at least the third lawsuit accusing the company of harvesting families' personal data.

  • September 30, 2026

    FCC Opens 2 Spectrum Bands For Satellite Services

    The Federal Communications Commission on Wednesday opened two portions of spectrum totaling more than 1,000 megahertz to expand satellite broadband as part of a long-range plan to free up the airwaves for space-based activities.

  • September 30, 2026

    Tech Co. Sensata Can't Duck Data Breach Class Action

    Sensata Technologies Inc. must face a lawsuit over a cybersecurity breach, a Massachusetts federal judge ruled Wednesday, finding that the industrial sensor technology company's former employees adequately pled that the ransomware attack has exposed them to a risk of identity theft.

  • September 30, 2026

    Paramount Can't Ax Most Claims In Pluto TV Privacy Action

    A California federal judge Tuesday allowed seven claims to proceed in an amended action alleging Paramount Skydance Corp. unlawfully disclosed the personally identifiable information of children who streamed content on its Pluto TV service, finding the parents sufficiently alleged privacy injuries after an earlier dismissal.

  • September 30, 2026

    Mid-Atlantic Law Firm Hit With Data Breach Class Action

    A Virginia woman filed a proposed class action on Tuesday accusing Midkiff Muncie & Ross PC of failing to protect her personal information from a cyberattack that the mid-Atlantic firm says it discovered in December.

  • September 30, 2026

    Insurer Must Cover Part Of Consulting Firm's $7.6M DOJ Deal

    A CNA insurer was required to defend a consulting firm against a False Claims Act suit claiming it allowed New Yorkers' personal information to be compromised while operating a pandemic-era rental assistance portal, and must cover a portion of the firm's $7.6 million settlement, a Virginia federal court ruled.

  • September 30, 2026

    Verano, Dispensary Failed To Protect Patient Info, Suit Says

    An Illinois woman is alleging that nationwide cannabis operator Verano Holdings Corp. and a St. Charles dispensary failed to properly protect patient data, allowing 2.4 million lines of database information to be put on the internet.

  • September 29, 2026

    Social Media Cos., Teens Spar Over Evidence Ahead Of Trials

    Social media companies and teens who allege the companies harmed their mental health sparred in California state court Tuesday over what evidence jurors will hear in an upcoming round of bellwether trials, including whether jurors should hear purported instances of domestic violence in the teens' home lives.

  • September 29, 2026

    Geico Call Class Sunk After Plaintiff Tosses Phone In River

    A Maryland federal judge has refused to certify a class of thousands of insurance claimants who received allegedly unauthorized prerecorded medical appointment reminders from a scheduling vendor retained by Geico, finding that factors such as the plaintiff's decision to throw his cellphone into the Mississippi River made him an inadequate class representative.

  • September 29, 2026

    OpenAI Knew AI Was Rogue Before Hugging Face, Suit Says

    A public interest law nonprofit sued OpenAI in California state court Tuesday, seeking to hold the ChatGPT maker liable for a July cyberattack on Hugging Face, arguing OpenAI "straightforwardly violated California law" by failing to rein in hundreds of rogue AI agents that OpenAI knew were running amok without proper safeguards.

Expert Analysis

  • UCC Digital Asset Update Is Altering Lender, Obligor Diligence

    Author Photo

    The rollout of the Uniform Commercial Code's Article 12 is transforming digital asset secured lending, forcing lenders and obligors to rethink diligence, control, custody, monitoring and contract terms, as well as collateral practices and financing structures, as jurisdictions continue to adopt the amendments, say attorneys at Lowenstein Sandler.

  • 3 Misconceptions About Justices' FCC Fines Ruling

    Author Photo

    The U.S. Supreme Court's June 4 Federal Communications Commission v. AT&T decision rejecting AT&T’s and Verizon’s argument that the commission's forfeiture process violates the Seventh Amendment has yielded three common reactions that misunderstand the decision as a matter of law and how the FCC actually operates, says Samuel Feder at Jenner & Block.

  • How FCA, FCPA Risks Are Shifting As Feds Pull Back

    Author Photo

    As the federal government continues its retreat from white collar enforcement, companies should expect False Claims Act risk to grow through private whistleblower suits and Foreign Corrupt Practices Act scrutiny to shift toward foreign prosecutors, requiring more adaptability as accountability becomes less centralized, says Temidayo Aganga-Williams at Selendy Gay.

  • New State AI Laws Create Dual Misrepresentation Risk

    Author Photo

    As artificial intelligence transparency laws are enacted across the country and the volume and specificity of compliance records increase, companies will be required to speak more often, more precisely and to more audiences about the same systems, compounding the risk of litigation, say attorneys at Cooley.

  • Series

    Cow Horse Makes Me A Better Lawyer

    Author Photo

    Moving an unwilling 800-pound cow while riding a horse at high speed is exhilarating, a little unhinged and, at least for me, a surprisingly effective training ground for litigation — both demand focus, preparation over rigid planning and the willingness to act despite fear, says Ashley Zitrin at Glenn Agre.

  • Fla. Driver Ruling Shows Renewed Focus On Privacy Standing

    Author Photo

    A Florida federal court's recent dismissal of a class action alleging that private driving records had been improperly used in violation of the Driver's Privacy Protection Act suggests that companies defending against privacy class actions in Florida may reconsider Article III challenges at the dismissal stage, say attorneys at Sidley.

  • PowerSchool Data Breach Ruling Underscores PE Liability

    Author Photo

    The recent California federal court decision in PowerSchool, where Bain Capital was unable to dismiss claims relating to a data breach based in part on Bain's preinvestment activities, is an important addition to the line of cases addressing investor liability for acts of a portfolio company, says Mark Kelley at MoloLamken.

  • Unpacking The Take It Down Act's Compliance Ambiguities

    Author Photo

    The Federal Trade Commission’s recent guidance concerning the Take It Down Act suggests that covered platforms should build removal systems immediately and prioritize compliance, but until courts or regulators provide additional clarity, companies will be navigating a statutory framework that is urgent and uncertain, says Laura-Kate Bernstein at ZwillGen.

  • West Coast Health Cos. Must Brace For Federal Enforcement

    Author Photo

    In light of the U.S. Department of Justice's newly established West Coast strike force targeting healthcare fraud across Northern California, Arizona and Nevada, health organizations will need to prioritize knowledge, vigilance and operational discipline to reduce exposure from potentially parallel criminal and civil investigations, says Michael Beckwith at Dickinson Wright.

  • Operational AI Washing: The Next Frontier Of Fiduciary Risk

    Author Photo

    While there are still no final Delaware decisions applying Caremark specifically to artificial intelligence governance failures, previous case law provides a blueprint, so the question for boards is whether their governance architectures will satisfy Caremark when the first cases are decided, say attorneys at Akerman.

  • Checking For AI Errors Is Now A Two-Way Street

    Author Photo

    A handful of recent federal and state cases demonstrate the importance of checking for errors generated by artificial intelligence not only in your own court submissions, but also your opponent's, as well as when catching opposing counsel's AI mistakes could result in an award for attorney fees, says Tamara Barago at Hollingsworth.

  • Series

    The Biz Court Digest: Shoring Up Corporate Law In Maryland

    Author Photo

    Launched more than 20 years ago to improve complex corporate adjudication, Maryland's Business and Technology Case Management Program has been a solid success in some areas, but there always is room for improvement, says Bill Krulak at Miles & Stockbridge.

  • 2nd Circ.'s Embedded Video Ruling May Protect Publishers

    Author Photo

    The Second Circuit's recent decision in Richardson v. Townsquare, dismissing an infringement claim arising from an embedding of a YouTube-hosted interview, reaffirms a potent defense for publishers who regularly use social media platforms' embed functionality, says Amanda Harris at Jassy Vick.

  • Data Collection Push Signals New Era For Bank Compliance

    Author Photo

    An executive order pushing for broad bank collection of beneficiary data and a Financial Crimes Enforcement Network geographic targeting order in Minnesota should prompt financial institutions to run checks on customer diligence and privacy controls, as these directives may be part of a wider compliance shift, say attorneys at Faegre Drinker.

  • Series

    Competing At Poker Makes Me A Better Lawyer

    Author Photo

    Playing poker in male-dominated rooms taught me to treat skepticism as background noise when my opponents seem to underestimate me, to apply pressure when it matters and to adapt without losing strategic discipline — skills that are all indispensable in restructuring and insolvency matters, says Alexis Gambale at Pashman Stein.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.