Cybersecurity & Privacy

  • September 24, 2025

    PNC Failed To Protect 740K Users' Data In Breach, Suit Claims

    A proposed class action filed in Pennsylvania federal court Tuesday claims PNC Financial Services suffered a data breach affecting 740,000 customers and should be held liable for not protecting their personal information.

  • September 24, 2025

    Lender Must Face Class Claims It Ignored 'Do Not Call' Asks

    A mortgage lender must face class allegations that it called people without their consent to market its loan products and continued to call people who asked it to stop, a Michigan federal judge has ruled, rejecting the lender's arguments that the proposed class is too vague.

  • September 23, 2025

    Industry Witnesses In Google Ad Tech Case Not 'That Helpful'

    A Virginia federal judge tightened the leash Tuesday on the U.S. Department of Justice and Google fight over the company's advertising placement technology business, expressing dissatisfaction with non-technical industry witnesses testifying about the benefits and costs of a government breakup proposal.

  • September 23, 2025

    Ad Groups Urge Newsom To Veto Calif. Opt-Out Tool Bill

    Four major ad industry groups are asking California Gov. Gavin Newsom to veto a bill that would require browser developers to offer a digital tool enabling consumers to more easily opt out of online behavioral advertising throughout the web.

  • September 23, 2025

    Google, Meta Beat BlueChew Users' Privacy Suit, For Now

    A California federal judge Tuesday dismissed a proposed class action alleging Google and Meta illegally gathered information from website users buying erectile dysfunction medication on BlueChew's website, since BlueChew's revised policy makes clear their personal data consisting of health information would be shared with third parties for advertising purposes.

  • September 23, 2025

    SEC Accuses Russian Man Of Hacking Pump & Dump Scheme

    The U.S. Securities and Exchange Commission hit a Russian national with a civil suit Monday, accusing him of hijacking hundreds of individual consumer brokerage accounts to run a $31 million pump-and-dump scheme with low-volume stocks and options.

  • September 23, 2025

    Cybersecurity Co.'s Projections Were Inflated, Investor Says

    Cybersecurity company Fortinet was hit with a proposed securities class action accusing it of overstating an expected revenue boost related to customer software upgrades, saying its executives knew the projections were unrealistic.

  • September 23, 2025

    This Week In Healthcare Cybersecurity

    Expiring Obama-era cybersecurity legislation, U.K. charges for 'Scattered Spider' breach, and the challenges of 23andMe's bankruptcy. Law360 looks at the week in cybersecurity developments affecting the healthcare industry.

  • September 23, 2025

    Gun Group Misused Buyers' Data For Political Ads, Suit Says

    The National Shooting Sports Foundation Inc. unjustly enriched itself by secretly obtaining the personal data of millions of firearms buyers from warranty registration cards and creating a database it then used to spread tailored political messages, a proposed class action alleges.

  • September 23, 2025

    Minnesota's Deepfake Crackdown Foreshadows Legal Clashes

    Minnesota's law cracking down on deepfake videos aimed at influencing elections has drawn separate court challenges to stop its enforcement, including one by X Corp., offering a glimpse into the hurdles other states and Congress may face as they address the proliferation of digital replicas created with artificial intelligence.

  • September 22, 2025

    Oracle To Secure TikTok Users' Data In Deal To Skirt US Ban

    Tech giant Oracle will be tasked with safeguarding U.S. TikTok users' personal data, and the app's recommendation algorithm will be "retrained" and operated outside the control of TikTok's Chinese parent company under a deal that President Donald Trump is expected to sign this week to avert a shutdown of TikTok, the White House said Monday. 

  • September 22, 2025

    Google Ad Tech Breakup 'Drastic' But Best, DOJ Tells Judge

    A U.S. Department of Justice attorney pressed a Virginia federal judge Monday to break up Google's advertising placement technology business, asserting in opening statements that a divestiture is doable and the only way to fully address Google's monopoly.

  • September 22, 2025

    Meta Can't Ditch Revived Contract Fight Over Scam Ads

    A California federal judge Monday trimmed a proposed consumer class action against Meta Platforms Inc. over Chinese vendors' scam ads on Facebook and Instagram that was recently revived by the Ninth Circuit, tossing for good a negligent failure-to-warn claim, but keeping intact the consumers' remaining contact claims.

  • September 22, 2025

    SEC Sues NC Man For 'Free-Riding' Securities Scheme

    A North Carolina man faces U.S. Securities and Exchange Commission allegations that he systematically gamed certain broker-dealers to engage in a so-called free-riding scheme that enabled him to trade nearly $900,000 worth of securities despite not actually possessing the funds to do so.

  • September 22, 2025

    T-Mobile, Sprint Push DC Circ. To Revisit $92M FCC Fines

    T-Mobile and Sprint are asking the full D.C. Circuit to review a $92 million fine from the Federal Communications Commission over their sale of sensitive user location data with third-party companies, asking for an en banc rehearing of their challenge after a three-judge panel unanimously affirmed the penalty last month. 

  • September 22, 2025

    Parents Want Roblox Grooming Suits Consolidated In Calif.

    Parents who claim their children were groomed and exploited by sexual predators on Roblox's popular gaming platform say their cases should be consolidated and sent to the Northern District of California since their cases are almost identical, according to a recent petition.

  • September 22, 2025

    Tech Groups Ask To Maintain Block On Fla. Social Media Law

    Tech industry organizations and civil rights groups threw their support behind two groups challenging a Florida law banning children 13 and under from social media, telling the Eleventh Circuit the law is an unconstitutional regulation of speech.

  • September 22, 2025

    Experian Asks 4th Circ. To Reverse Arb. Ruling In FCRA Suit

    Consumer reporting agency Experian has asked the Fourth Circuit to overturn a lower court's decision concerning the arbitration of a lawsuit brought by a consumer falsely reported as dead, saying the judge was wrong not to enforce clauses in the consumer's agreement that delegated such decisions to an arbitrator.

  • September 22, 2025

    Barclays Credit Card User Must Arbitrate Meta Privacy Suit

    A Barclays customer must arbitrate his putative class action alleging it discloses his interactions on the bank's website with Meta Platforms Inc. while logged into his Barclays account, after a New York federal judge said Friday his subsequent use of his credit cards supports that he received cardholder agreements containing arbitration provisions.

  • September 22, 2025

    High Court Allows FTC Firing, Will Review Trump's Power

    The U.S. Supreme Court ruled Monday that President Donald Trump can fire Democratic Federal Trade Commissioner Rebecca Slaughter without cause, and it agreed to reconsider limits on the president's authority to remove members of the FTC.

  • September 19, 2025

    EU-US Data Transfer Ruling Delivers Relief But Not Finality

    A recent court decision backing a revamped framework for transferring personal data from the European Union to the United States provided companies with some much-needed comfort after nearly a decade of setbacks although that reprieve might be short-lived as opponents eye a broader challenge to the critical arrangement.

  • September 19, 2025

    Fla. Court OKs $20M Settlement In Fortra Data Breach MDL

    A Florida federal judge gave final approval to a $20 million class action settlement as part of multidistrict litigation over theft of personal information from millions of U.S. citizens in a health data breach tied to a Russian ransomware group.

  • September 19, 2025

    MLB App Breaches Led To Lost, Stolen Tickets, Fan Claims

    Major League Baseball's mobile ticketing app has had systemic security breaches resulting in the disappearance or theft of game tickets throughout the season, with MLB failing to fully acknowledge the problem and leaving fans "in the lurch,'' according to a proposed class action in New York federal court.

  • September 19, 2025

    Treasury Launches Stablecoin Rule Push With Call For Input

    The U.S. Department of the Treasury on Friday asked for public input on key regulatory considerations for stablecoins as it begins crafting rules to govern the stable-value crypto tokens under the recently signed Genius Act.

  • September 19, 2025

    CFPB Union Drops Suit Over DOGE Access To Worker Data

    The National Treasury Employees Union on Friday dropped a lawsuit seeking to block Department of Government Efficiency access to personnel data at the Consumer Financial Protection Bureau, a move that comes as the union assesses next steps in its other, higher-profile challenge to the consumer agency's downsizing.

Expert Analysis

  • Series

    Volunteering At Schools Makes Me A Better Lawyer

    Author Photo

    Speaking to elementary school students about the importance of college and other opportunities after high school — especially students who may not see those paths reflected in their daily lives — not only taught me the importance of giving back, but also helped to sharpen several skills essential to a successful legal practice, says Guillermo Escobedo at Constangy.

  • Attacks On Judicial Independence Tend To Manifest In 3 Ways

    Author Photo

    Attacks on judicial independence now run the gamut from gross (bald-faced interference) to systemic (structural changes) to insidious (efforts to undermine public trust), so lawyers, judges and the public must recognize the fateful moment in which we live and defend the rule of law every day, says Jim Moliterno at Washington and Lee University.

  • Loophole To Budget Bill's AI Rule May Complicate Tech Regs

    Author Photo

    An exception in the One Big Beautiful Bill Act that could allow state and local governments to develop ostensibly technology-neutral laws that nonetheless circumvent the bill’s ban on state artificial intelligence regulation could unintentionally create a more complex regulatory environment for technologies beyond AI, says Pooya Shoghi at Lee & Hayes.

  • OCC's Digital Embrace Delivers Risk, Opportunity For Banks

    Author Photo

    As the Office of the Comptroller of the Currency continues to release and seek more information on banks' participation in the crypto-asset arena, institutions may see greater opportunity to pursue digital asset and custody services, but must simultaneously educate themselves on transformations occurring throughout the industry, says Kirstin Kanski at Spencer Fane.

  • Remediation Still Reigns Despite DOJ's White Collar Shake-Up

    Author Photo

    Though the U.S. Department of Justice’s recently announced corporate enforcement policy changes adopt a softer tone acknowledging the risks of overregulation, the DOJ has not shifted its compliance and remediation expectations, which remain key to more favorable resolutions, say Jonny Frank, Michele Edwards and Chris Hoyle at StoneTurn.

  • Series

    Law School's Missed Lessons: Appreciating Civil Procedure

    Author Photo

    If you’re like me, law school’s often complex and theoretical approach to teaching civil procedure may have contributed to an early struggle with the topic, but when seen from a practical perspective, new lawyers may find they enjoy mastering these rules, says Chloe Villagomez at Foster Garvey.

  • Appellate Guidance Needed On California Chatbot Litigation

    Author Photo

    There is wide variation in how courts are applying the California Invasion of Privacy Act against website owners that allegedly help third parties spy on visitors via chatbots — and the lack of appellate rulings creates uncertainty, especially as these cases move toward the summary judgment stage, say attorneys at Crowell & Moring.

  • Calif. Bar Exam Fiasco Shows Why Attys Must Disclose AI Use

    Author Photo

    The recent revelation that a handful of questions from the controversial California bar exam administered in February were drafted using generative artificial intelligence demonstrates the continued importance of disclosure for attorneys who use AI tools, say attorneys at Troutman.

  • Platforms Face Section 230 Shift From Take It Down Act

    Author Photo

    The federal Take It Down Act, signed into law last month, aims to combat deepfake pornography with criminal penalties for individual wrongdoers, but the notice and takedown provisions change the broad protections provided by Section 230 of the Communications Decency Act in ways that directly affect platform providers, say attorneys at Troutman.

  • In 2nd Place, Va. 'Rocket Docket' Remains Old Reliable

    Author Photo

    The U.S. District Court for the Eastern District of Virginia was again one of the fastest civil trial courts in the nation last year, and an interview with the court’s newest judge provides insights into why it continues to soar, says Robert Tata at Hunton.

  • CIPA May Not Be Necessary To Protect Ad Tech Plaintiffs

    Author Photo

    A California bill designed to protect businesses from advertising technology claims under the California Invasion of Privacy Act by amending the act retroactively has been highly contested by various consumer advocacy groups, but other existing law may sufficiently protect any plaintiff who suffers actual harm from such tech, says Justin Donoho at Duane Morris.

  • What FCA Liability Looks Like In The Cybersecurity Realm

    Author Photo

    ​Two recent settlements highlight how whistleblowers and the U.S. Department of Justice have been utilizing the False Claims Act to allege fraud predicated on violations of cybersecurity standards — timely lessons given new bipartisan legislation introducing potential FCA liability for artificial intelligence use, say​ attorneys Rachel Rose and Julie Bracker.

  • How Attorneys Can Become Change Agents For Racial Equity

    Author Photo

    As the administration targets diversity, equity and inclusion efforts and law firms consider pulling back from their programs, lawyers who care about racial equity and justice can employ four strategies to create microspaces of justice, which can then be parlayed into drivers of transformational change, says Susan Sturm at Columbia Law School.

  • 5 Takeaways From DOJ's Media Compulsory Process Rules

    Author Photo

    The U.S. Department of Justice’s new rules, making it easier for law enforcement investigating leaks to compel members of the media and third parties to disclose information, could have wide-ranging impacts, from reduced protections for journalists and organizations, to an expanded focus on nonclassified material, say attorneys at WilmerHale.

  • Opinion

    9th Circ. Shopify Decision Gets Personal Jurisdiction Wrong

    Author Photo

    The Ninth Circuit's recent opinion in Briskin v. Shopify, rejecting the differential targeting requirement for personal jurisdiction, not only deviates from long-standing jurisprudence, but it also significantly expands the reach of internet-based claims under California law, says Matthew Pearson at Womble Bond.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.