Cybersecurity & Privacy

  • October 29, 2026

    Fed. Circ. Upholds Decision Wiping Out Cybersecurity Patent

    The Federal Circuit on Thursday affirmed a Patent Trial and Appeal Board decision holding that a patent covering methods of monitoring a system for cyberattack detection was invalid as obvious.

  • October 29, 2026

    Troutman, Baker McKenzie Report Data Breaches

    Troutman Pepper Locke LLP and Baker McKenzie LLP experienced data breaches last month as a result of social engineering attacks, according to notices submitted this week to the attorneys general offices in California and Texas.

  • October 29, 2026

    Google Cut Worker's Duties After Military Leave, Feds Say

    Google failed to reinstate a former employee to a similar role after he returned from a yearlong stint in the U.S. Army's Cyber Command unit and eventually laid him off, according to a lawsuit the U.S. Department of Justice filed Thursday in Manhattan.

  • October 29, 2026

    US Bankruptcy Noticing System Back Up After Cyber Event

    A BAE Systems Inc. spokesperson said in a statement Thursday the nationwide Bankruptcy Noticing Center has resumed operations following a cybersecurity incident that had brought the system to a halt earlier this month.

  • October 29, 2026

    States Say GM Will Pay $220M To Settle Driver Privacy Claims

    Attorneys general said Thursday that General Motors will pay $220 million to three dozen states to settle claims that it illegally sold nearly 10.3 million drivers' behavior data and location information to third parties, including data brokers that passed it on to insurers.

  • October 29, 2026

    5th Circ. Will Review Texas Content-Filtering Law Ruling

    The Fifth Circuit has granted Texas' request for an en banc rehearing of a July panel opinion that partly upheld a block on the state's new law requiring companies to filter content for underage users.

  • October 28, 2026

    CFTC's Selig Vows 'Grounded' Oversight Of Agentic Finance

    U.S. Commodity Futures Trading Commission Chairman Michael Selig said Wednesday that his agency plans to take a "grounded" approach to agentic finance that's also mindful of the risks it poses and courted industry feedback on how to address the rise of artificial intelligence in derivative markets.

  • October 28, 2026

    Product Liability's Regulatory & Legislative Recap So Far

    Over the summer and early fall, lawmakers proposed measures aimed at putting safeguards around the rapidly growing industry of artificial intelligence, as public concerns over its safety climb in tandem. The new nominee to head the U.S. Food and Drug Administration also faced sharp queries over her views on vaccines and birth control.

  • October 28, 2026

    CFPB Audit Flags Cybersecurity Gaps Amid Staff Departures

    The Consumer Financial Protection Bureau has failed to promptly fix serious cyber weaknesses and consistently track data in its possession as staffing losses have hampered the agency's ability to safeguard its systems, according to a federal watchdog audit released Wednesday.

  • October 28, 2026

    Patients Seek OK Of Connecticut Rehab Data Breach Deal

    Patients accusing a Connecticut medical rehab network of waiting almost a year to disclose a cyberattack have asked a state court judge to preliminarily bless a deal that would provide about 61,000 people up to $2,500 in cash, plus $1 million in identity theft insurance.

  • October 28, 2026

    Jury Selection Starts In 2nd Social Media Bellwether In LA

    Jury selection began Wednesday in a California courtroom for the second bellwether trial focused on allegations that major social media companies are harming the mental health of children, with Meta Platforms Inc. returning to the defense table next to Snap Inc., which is facing jurors on the claims for the first time.

  • October 28, 2026

    Proskauer, Reddit Attys Called To Testify In Data-Scraping Suit

    A New York federal judge on Wednesday called for live testimony from two Proskauer Rose LLP attorneys and Reddit's deputy general counsel as he weighs the law firm's bid to represent Perplexity AI in a lawsuit from Reddit, the firm's former client, over alleged data scraping.

  • October 28, 2026

    Denver Law Firm Sued Over Delayed Data Breach Notice

    A Denver law firm was hit with a proposed class action in Colorado federal court Tuesday from an Oklahoma man accusing it of allowing his and thousands of others' personally identifiable information to be stolen in a cyberattack.

  • October 28, 2026

    FTC Probes Delta, Uber, Others Over Data-Driven Pricing

    The Federal Trade Commission is pressing Delta, Uber, Target and a half-dozen other companies to detail how they're using personal data to set individualized pricing for consumers and compensation for workers, marking the latest escalation of the agency's growing scrutiny of the increasingly prominent business practice.

  • October 28, 2026

    DOD Contractor Owes $1.2M In Whistleblower Suit, Jury Says

    An ex-employee of a U.S. Department of Defense contractor won a $1.2 million award after a Colorado federal jury found the contractor liable for wrongful discharge and violations of the Defense Contractor Whistleblower Protection Act, according to the final judgment, entered Wednesday. 

  • October 28, 2026

    Watchdog Seeks Privacy Guardian In Character.AI Ch. 11 Sale

    The U.S. Trustee's Office said a Delaware bankruptcy judge must appoint a consumer privacy ombudsman to review the sale of artificial intelligence entertainment platform Character Technologies' assets, saying its Character.AI platform includes identifiable information from users' chats.

  • October 28, 2026

    4th Circ. Judge Sees 'Big Brother' In Va. Social Media Limits

    A Fourth Circuit judge Wednesday expressed concern with a Virginia law limiting children's access to social media, telling counsel for the commonwealth that the provision has a "Big Brother atmosphere" to it and suggesting he'd back the district court's injunction halting enforcement of the regulation.

  • October 28, 2026

    Meta Wants Ex-WhatsApp Security Head's Suit Axed For Good

    Meta has urged a California federal judge to permanently dismiss a whistleblower retaliation suit from a former cybersecurity head for WhatsApp, saying the fourth version of his complaint repleads theories the court has tossed and still doesn't show the managers responsible for the alleged retaliation knew about his claimed protected activity.

  • October 28, 2026

    Texan Claims Austin Firm Hasn't Alerted Him To Data Breach

    Linebarger Goggan Blair & Sampson LLP, an Austin, Texas-based law firm focused on collecting debts and taxes for public-sector clients, failed to protect its clients' personal information from a data breach, the plaintiff in a proposed class action claimed in Texas federal court Tuesday.

  • October 27, 2026

    Mass. Hospitals Sue Lilly Over 340B Discount Data 'Extortion'

    A group of Massachusetts hospitals claim drugmaker Eli Lilly & Co. unlawfully holds hostage medication discounts meant to benefit low-income patients by demanding that hospitals hand over sensitive patient claims data or pay "exorbitant" inflated prices, according to a lawsuit filed Tuesday in Boston federal court.

  • October 27, 2026

    Anthropic's 'Existential Risks' Warning Sets Stage For AI IPOs

    Anthropic PBC's registration statement includes more than 90 pages of risk disclosures for prospective investors ahead of the Claude developer's planned public offering, including "existential risks to humanity" posed by advanced artificial intelligence and a corporate governance structure the company warns may make it difficult for voting shareholders to replace directors and managers.

  • October 27, 2026

    Google Class Attys Get $2M In $8.25M Kids' App Tracking Deal

    A California federal judge has awarded class counsel just over $2 million in fees and expenses as part of an $8.25 million deal to resolve a proposed class action accusing Google of surreptitiously tracking children's online activity, despite expressing "some concern" that the rates and hours billed by one plaintiffs' firm was "excessive" and rejecting some of the firm's travel expenses. 

  • October 27, 2026

    Milliman Reaches $15.5M Deal In Life Insurance FCRA Suit

    Risk management firm Milliman Inc. is set to pay $15.5 million to resolve a consumer class action accusing the company of peddling flawed information to life insurance companies, according to a proposed settlement that the plaintiffs filed for preliminary court approval in Washington federal court on Monday.

  • October 27, 2026

    Google Can't Dodge Ex-NPR Host's AI Voice Misuse Suit

    Google cannot escape former NPR "Morning Edition" co-host David Greene's lawsuit alleging the tech giant misappropriated his voice in an artificial intelligence podcasting product, a California judge ruled.

  • October 27, 2026

    Snapchat Accused Of Letting Predators Exploit Kids

    The company behind the popular app Snapchat has been sued in Philadelphia court by a group of parents alleging that the platform allowed predators to sexually exploit their children while at the same time holding itself out to be a safe place for kids.

Expert Analysis

  • Parsing The Lowest SEC Enforcement Stats In Over A Decade

    Author Photo

    Statistics show that the U.S. Securities and Exchange Commission brought a historically low number of enforcement actions during Paul Atkins' first full fiscal year as chairman, delivering on his promise to reduce enforcement in program areas focused on recordkeeping and other technical violations, say attorneys at Covington.

  • NHTSA Vehicle Recorder Rule Highlights Crash Data Protocols

    Author Photo

    An amended rule from the National Highway Traffic Safety Administration will soon require vehicle event data recorders to capture more information about crashes — but to turn that data into evidence, attorneys, claims professionals and fleet managers must properly obtain and preserve it after an incident occurs, says Andrew Haling at Pathway Law.

  • Online Presence Complicates Defamation's Public Figure Test

    Author Photo

    Recent defamation cases demonstrate that online presence can affect how courts distinguish between public and private figures, so litigants should consider several questions when evaluating potential claims and defenses where public figure status may affect the litigation, such as whether there is a connection between the plaintiff's public activities and the alleged defamation, say attorneys at Brown Rudnick.

  • New Manhattan DA Task Force Puts Antitrust In Its Crosshairs

    Author Photo

    The Manhattan District Attorney's Office's new corporate crime and antitrust task force is adding local criminal enforcement to a field long led by federal authorities, meaning companies need to account for potential parallel federal and state antitrust investigations when responding to misconduct, say attorneys at Ropes & Gray.

  • Tort Liability When AI Goes Rogue: Product Liability

    Author Photo

    The recent Hugging Face cyberattack led by artificial intelligence agents, as well as reports from AI companies themselves, suggest that sometimes there may be no reasonable way to predict or prevent harm by rogue agentic AI — but product liability law could provide a remedy in some cases, says Donald Hawthorne at Carter Ledyard.

  • 3 Strategies To Reduce AI Sycophancy In Legal Work

    Author Photo

    The tendency of generative artificial intelligence models to tell users what they want to hear can reinforce attorneys’ confirmation bias when testing the strength of arguments, and it can’t simply be prompted away — but a few practices can help mitigate it, says Michael Ott at Ice Miller.

  • AI Risks May Recalibrate 'Reasonable Security' Standards

    Author Photo

    A definitive answer to what constitutes reasonable vulnerability management in the age of artificial intelligence is still emerging, but the answer is likely less a reset of the standard than a recalibration of how organizations meet it, say Scott Loughlin at Hogan Lovells and Mike Priest at Globe Life.

  • Key Risk Assessment Gaps To Note From NY Cyber Guidance

    Author Photo

    Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

  • Tort Liability When AI Goes Rogue: Strict Liability

    Author Photo

    If artificial intelligence agents misbehave in unpredictable ways, and no reasonable precaution can prevent resulting harms, then a negligence regime may not provide sufficient remedy, and strict liability might be adapted to cover agents' misconduct — but the common notion of strict liability fits this situation imperfectly, says Donald Hawthorne at Carter Ledyard.

  • Open Issues After 2nd Circ.'s Airport Phone Search Ruling

    Author Photo

    While the Second Circuit’s recent U.S. v. Alisigwe decision confirms border agents' broad authority to conduct routine manual cellphone searches at ports of entry, significant questions remain about more wide-ranging forensic searches at the border, say attorneys at Baker Botts.

  • FTC's Changing Model Raises Questions About Its Mission

    Author Photo

    Federal Trade Commission leaders have recently sketched a vision of an agency that continues an enforcement role distinct from the U.S. Department of Justice's, even as a shift toward greater presidential control makes enforcement more responsive to changes in administrations, say attorneys at Wiley.

  • 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

    Author Photo

    In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

  • Tort Liability When AI Goes Rogue: Negligence Theory

    Author Photo

    If reasonable care in the use of artificial intelligence agents cannot eliminate the risk of third-party harm, then AI companies and users of AI agents must consider whether negligence theory provides an adequate framework for assessing harm caused by agents that go rogue, says Donald Hawthorne at Carter Ledyard.

  • Digging Into Dems' Letter On Subpoena Secrecy Demands

    Author Photo

    Lawmakers’ recent letter arguing that federal agencies’ use of boilerplate nondisclosure language in subpoenas pressures recipients into silence may lead to a significant overhaul of the current framework, but in the meantime, companies should review their rights and options, say attorneys at Crowell & Moring.

  • 3 Steps To Mitigate The Cyber Risks From Employee AI Use

    Author Photo

    Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here