Cybersecurity & Privacy

  • March 24, 2026

    Baltimore Takes XAI To Court Over Grok's Sexual Deepfakes

    Baltimore on Tuesday became one of the first municipalities to sue Elon Musk's xAI over the Grok artificial intelligence platform's ability to transform ordinary photographs into nonconsensual sexualized deepfake images, including creating child sexual abuse material, saying it's exposing city residents to degrading content, harassment and psychological harm.

  • March 24, 2026

    BofA Wants Customer Suit Over Post-Jan. 6 Data Sharing Axed

    Bank of America has asked a Florida federal judge to toss a proposed class action accusing it of financial privacy violations tied to the aftermath of the Jan. 6, 2021, U.S. Capitol attack, arguing the U.S. Supreme Court has held that bank customers do not have ownership or expectations of privacy over their bank account records.

  • March 24, 2026

    FINRA CEO Highlights New Clearinghouse For Cyber Threats

    Robert Cook, CEO of the Financial Industry Regulatory Authority, said Tuesday that it will soon be rolling out a clearinghouse for firms to report cybersecurity threats and to promote information sharing across the industry.

  • March 24, 2026

    IT Co. Says Fed. Circ. Ruling Blesses 'Moving Target' Records

    An IT contractor said the Federal Circuit should reconsider a panel ruling upholding the U.S. Department of Commerce's authority to unilaterally take corrective action during litigation over a $1.5 billion procurement, warning it threatens to "devastate the bid protest process."

  • March 24, 2026

    Heritage Bank Client Alleges 'Unsecure' Servers Led To Breach

    A Heritage Bank customer claimed in a putative class action Tuesday that the Washington-based financial institution failed to properly guard users' personal data that was stolen in a March 1 cyberattack, alleging the company used substandard security practices and failed to update its systems on a timely basis.

  • March 24, 2026

    Wash. Mandates AI Content Flags, Suicide Safeguards

    Washington Gov. Bob Ferguson signed a pair of bills on Tuesday requiring large artificial intelligence companies to embed data that distinguishes deepfakes as AI-generated and forcing companion chatbot developers to take steps to protect minor users from suicide and self-harm.

  • March 24, 2026

    Snap Suit Tossed For State Enforcement Action Interference

    A Utah federal judge on Tuesday dismissed Snap Inc.'s suit against two state officials aiming to block a state enforcement action, finding that the court must abstain while that enforcement action is pending.

  • March 24, 2026

    Fiserv, Credit Union Settle Payment Data Security Lawsuit

    Fiserv Solutions LLC and Cencap Federal Credit Union have "tentatively settled" a Connecticut federal lawsuit accusing the payment processor and fintech provider of operating an online banking platform that contained security flaws.

  • March 24, 2026

    Meta Owes $375M In NM Trial Over Harm To Teens

    A New Mexico jury said Tuesday that Meta must pay $375 million over the state attorney general's bellwether claims that the social media giant hid the full scope of mental health harm its apps were causing to underage users.

  • March 24, 2026

    AGs Seek Federal Help To Tackle Chinese App Drug Trade

    North Carolina Attorney General Jeff Jackson announced Monday that he's leading a bipartisan group of state enforcers in asking the federal government to act on drug traffickers' co-opting of Chinese-owned messaging app WeChat and its sister app Weixin to propagate the illegal drug trade. 

  • March 23, 2026

    Meta Ends WhatsApp Security Head's Retaliation Suit For Now

    A California federal judge dismissed, for now, a retaliation claim by a former Meta employee who claimed he was fired after reporting cybersecurity shortfalls concerning WhatsApp, finding the plaintiff's complaints aren't protected under the Sarbanes-Oxley Act since his cybersecurity violation reports don't relate to internal accounting controls.

  • March 23, 2026

    Anthropic Says DOD Security Risk Label Is Unconstitutional

    Anthropic PBC has doubled down on its push for an order blocking the Trump administration from labeling it a supply chain risk to national security, telling a California federal court the executive branch was punishing "a major company for the sin of expressing its views on a matter of profound public significance."

  • March 23, 2026

    SEC Must Give Video Of Elon Musk Interview To Oscar Winner

    The U.S. Securities and Exchange Commission must release a video interview of Elon Musk from its civil fraud investigation of the billionaire to a film company led by Oscar-winner Alex Gibney, a D.C. federal judge ruled Monday, saying the SEC already has publicized the interview's contents through a transcript.

  • March 23, 2026

    Social Media Jurors Say They Are Deadlocked On A Defendant

    A California jury considering claims Meta and Google harm children's mental health through their social media platforms reported Monday that it is deadlocked as to one of the defendants, but it wasn't clear if the jury is stuck on the question of liability or on potential punitive damages.

  • March 23, 2026

    FCC Urges Justices To Reject Repeal Of Penalty Power

    The Federal Communications Commission has urged the U.S. Supreme Court to keep the agency's monetary penalty powers intact, saying the agency's current practice does not deny targets of fines their right to a jury trial and is not binding until a court orders payment.

  • March 23, 2026

    FCC Adds Foreign Routers To Nat'l Security Risk List

    The Federal Communications Commission on Monday added foreign-made routers to a list of consumer electronics gear that cannot be sold on the U.S. market without specific authorization.

  • March 23, 2026

    FINRA Fines Stash Capital For AML, Identity Theft Controls

    The Financial Industry Regulatory Authority fined digital investing platform operator Stash Capital $450,000 for allegedly failing to properly review applications and detect suspicious account activity during a period of sharp customer growth.

  • March 23, 2026

    Novartis Faces Class Suit Over Patient Health Info Disclosure

    Drugmaker Novartis collected patients' personal and health information through pharmaceutical marketing websites and transmitted it to third parties including Google using "surreptitious online tracking tools" without patients' consent, a proposed class action in New Jersey federal court alleges.

  • March 23, 2026

    Md. Judge Rules Written Consent Not Needed Under TCPA

    Echoing a recent Fifth Circuit ruling, a Maryland federal judge has held that written consent to receive telemarketing calls is not required under the Telephone Consumer Protection Act, reversing a decision to certify a class of consumers against a dental plan marketer.

  • March 23, 2026

    Pediatric Data Breach Class Action Can Stay In NC Biz Court

    A consolidated class action alleging a pediatric medical practice failed to protect minor patients' data from hackers can remain in the North Carolina Business Court, a judge ruled in finding the lawsuits were properly designated to the state's specialized superior court for complex business matters.

  • March 23, 2026

    New Wash. Law Cuts Antispam Penalties Amid Multiple Suits

    Statutory penalties for emails sent in violation of Washington state's Commercial Electronic Mail Act, which bars messages with false or misleading subject lines, will fall from $500 per email to $100 under a measure signed into law by Gov. Bob Ferguson on Monday.

  • March 23, 2026

    Duke Health's $3.7M Pixel Privacy Deal Gets Initial OK

    Hundreds of thousands of Duke University Health System Inc. patients are one step closer to securing a share of a $3.7 million settlement stemming from a health data tracking suit involving Meta's Pixel, after a North Carolina federal court granted preliminary approval of the class action settlement.

  • March 23, 2026

    Ex-White Sox Star Thomas Sues Team, Nike Over Jersey Sales

    Former Chicago White Sox player Frank Thomas has sued his ex-team, Nike and Fanatics in Illinois state court, claiming they unlawfully sold jerseys bearing his name and number without his consent and without compensating him in any way.

  • March 23, 2026

    AbbVie Escapes Ill. Genetic Privacy Lawsuit

    An Illinois federal judge on Friday granted AbbVie summary judgment in a lawsuit claiming it violated the state's genetic privacy law, saying there was "no genuine dispute" that AbbVie never conditioned the plaintiff's employment on whether he disclosed genetic information in the physical exam he was required to undergo before starting work.

  • March 23, 2026

    Social Media Atty Sanctioned For 'Most Shameful Moment'

    A California judge on Monday sanctioned an attorney for the plaintiff in a bellwether trial alleging Meta Platforms and Google's social media platforms harm children's mental health, fining him $1,100 and keeping him off the plaintiffs' steering committee for violating court rules by twice filming inside the courthouse.

Expert Analysis

  • Navigating AI In The Legal Industry

    Author Photo

    As artificial intelligence becomes an increasingly integral part of legal practice, Law360 guest commentary this year examined evolving ethical obligations, how the plaintiffs bar is using AI to level the playing field against corporate defense teams, and the attendant risks of adoption.

  • A 6th Circ. Snapshot: 3 Cases That Defined 2025

    Author Photo

    With more than a thousand opinions issued this year, three rulings from the Sixth Circuit stood out for the impact they'll have on the practice of civil procedure, including a net neutrality decision, a class certification standards ruling and an opinion about vulgarity in school, say attorneys at Ice Miller.

  • How Fractional GCs Can Manage Risks Of Engagement

    Author Photo

    As more organizations eliminate their in-house legal departments in favor of outsourcing legal work, fractional general counsel roles offer practitioners an engaging and flexible way to practice at a high level, but they can also present legal, ethical and operational risks that must be proactively managed, say attorneys at Boies Schiller.

  • SEC Rulemaking Radar: A Reset, A Shift And A Preview Of '26

    Author Photo

    With major proposals withdrawn and new priorities emerging, forthcoming U.S. Securities and Exchange Commission proposals in 2026 will look to reshape how digital assets are regulated, recalibrate market structure and simplify how small companies go public, says Christopher Grobbel at Goodwin.

  • Changes In Crypto, Cybersecurity Defined NY Banking In 2025

    Author Photo

    The major takeaways from 2025 in New York banking policy involve updated guidance, regulations and requirements primarily affecting innovation and digital banking, in areas such as cybersecurity, virtual currencies, and buy now, pay later programs, say attorneys at Steptoe.

  • Reviewing 2025's Most Pertinent Wiretap Developments

    Author Photo

    2025 was a remarkable year in the world of web tracking wiretapping litigation, not only for the increased caseload but also because of numerous developing theories of liability, with disputes expected to continue unabated in 2026, say attorneys at Squire Patton.

  • Series

    Nature Photography Makes Me A Better Lawyer

    Author Photo

    Nature photography reminds me to focus on what is in front of me and to slow down to achieve success, and, in embracing the value of viewing situations through different lenses, offers skills transferable to the practice of law, says Brian Willett at Saul Ewing.

  • Series

    Law School's Missed Lessons: Practical Problem Solving

    Author Photo

    Issue-spotting skills are well honed in law school, but practicing attorneys must also identify clients’ problems and true goals, and then be able to provide solutions, says Mary Kate Hogan at Quarles & Brady.

  • Reviewing 2025's State And Federal AI Regulations

    Author Photo

    In light of increasing state and federal action to oversee the use of artificial intelligence, companies that develop or deploy the technology should keep abreast of current and forthcoming AI laws and consider their applicability to their business activities, says Jessica Brigman at Spencer Fane.

  • What Trump Order Limiting State AI Regs Means For Insurers

    Author Photo

    Last week's executive order seeking to preclude states from regulating artificial intelligence will likely have minimal impact on insurers, but the order and related congressional activities may portend a federal expectation of consistent state oversight of insurers' AI use, says Kathleen Birrane at DLA Piper.

  • How Workforce, Tech Will Affect 2026 Construction Landscape

    Author Photo

    As the construction industry's center of gravity shifts from traditional commercial work to infrastructure, energy, industrial and data-hosting facilities, the effects of evolving technology and persistent labor shortages are reshaping real estate dealmaking, immigration policy debates and government contracting risk, say attorneys at Cozen O'Connor.

  • 4 Privacy Trends This Year With Lessons For Companies

    Author Photo

    As organizations plan for ongoing privacy law changes, 2025 trends that include a shift of activity from the federal to the state level mean companies should take an adaptive and principle-based approach to privacy programs rather than trying to memorize constantly changing laws, say attorneys at Sheppard Mullin.

  • Opinion

    A Uniform Federal Rule Would Curb Gen AI Missteps In Court

    Author Photo

    To address the patchwork of courts’ standing orders on generative artificial intelligence, curbing abuses and relieving the burden on judges, the federal judiciary should consider amending its civil procedure rules to require litigants to certify they’ve reviewed legal filings for accuracy, say attorneys at Shook Hardy.

  • Series

    The Law Firm Merger Diaries: Integrating Practice Groups

    Author Photo

    Enacting unified leadership and consistent client service standards ensures law firm practice groups connect and collaborate around shared goals, turning a law firm merger into a platform for growth rather than a period of disruption, says Brian Catlett at Fennemore Craig.

  • Nonprofits Face Uncertainty Over Political Activity Rules

    Author Photo

    Two federal court decisions suggesting that the Internal Revenue Service's rules for 501(c)(4) organizations' political activity may be too vague to survive constitutional scrutiny leave nonprofit organizations caught between constitutional limits on government regulation of speech and tax limits on their exempt status, say attorneys at BakerHostetler.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.