Cybersecurity & Privacy

  • December 19, 2025

    Google Says SerpApi Bypasses Security To Scrape IP

    Google says data-scraping firm SerpApi circumvents its security measures protecting copyrighted content that appears in search results, alleging in a California federal lawsuit Friday that SerpApi steals content Google licenses from others "at an astonishing scale" and then resells it to its own customers.

  • December 19, 2025

    AI Note-Taking Software Stores Voice Data, Ill. Suit Says

    Artificial intelligence software that provides transcription and other meeting assistance on platforms such as Zoom and Microsoft Teams illegally collects, stores and uses individuals' biometric voice data without their informed consent, according to a lawsuit filed in Illinois federal court.

  • December 19, 2025

    F5 Faces Securities Class Action Over 'False' Security Claims

    Seattle tech company F5 Inc. boasted to investors about its cybersecurity offerings while at the same time hiding a long-term data breach that targeted the company's highest-revenue product, an investor claimed Friday in a proposed class action filed in Washington federal court.

  • December 19, 2025

    23 AGs Oppose FCC's Possible AI Law Preemption

    Nearly two dozen state attorneys general joined forces to urge the Federal Communications Commission not to issue a ruling that would preempt state-level regulation of artificial intelligence technologies, arguing in a comment letter that the agency lacks such authority.

  • December 19, 2025

    Cadence Bank Seeks 1st Nod For $5.25M Data Breach Deal

    Cadence Bank has reached a $5.25 million deal to end negligence claims it faced in multidistrict litigation over the May 2023 breach of file transfer application MOVEit, a consumer affected by the breach has informed a Boston federal judge.

  • December 19, 2025

    BigLaw And Boutiques Both Shine In 2025's Top 10 Deals

    A tight circle of elite law firms guided the way as megadeals roared back with force in 2025, while a small group of specialist and international firms also made their mark across global transactions spanning infrastructure, gaming, pharmaceuticals, artificial intelligence and energy.

  • December 19, 2025

    9th Circ. Takes Up IPhone Buyers' Class Decertification

    The Ninth Circuit has summarily agreed to let consumers appeal what they had described as the "death knell" district court ruling that decertified their class of iPhone users that was expected to reach 200 million members in an antitrust case over Apple's App Store policies.

  • December 19, 2025

    The 6 Biggest Rulings By Massachusetts' Top Court In 2025

    Massachusetts' top court rejected a novel double jeopardy claim in a headline-grabbing murder case, revived claims against Harvard over a "ghoulish" scheme, and said a Snapchat Bitmoji could show police bias, among other significant rulings this year.

  • December 18, 2025

    Hisense Blocked From Collecting Texan TV Viewers' Data

    A Texas state court temporarily blocked Chinese television maker Hisense from collecting viewers' personal data as the Lone Star State's attorney general sues the manufacturer and four other companies for allegedly "spying" on what consumers are watching, the attorney general has announced.

  • December 18, 2025

    Amazon Can't Shed Class Status In Virtual Try-On Privacy Suit

    A Seventh Circuit panel has affirmed an Illinois district judge's certification of a class of more than 100,000 Amazon shoppers who accuse the e-commerce giant of illegally collecting and preserving their facial geometry data when they used the company's virtual try-on feature to preview products such as makeup and eyewear.

  • December 18, 2025

    OCC Ends Citi Risk Management Resource Review Order

    The Office of the Comptroller of the Currency on Thursday formally ended a 2024 amendment to a previous consent order against Citibank over its risk management practices, with Citibank saying the relevant remediation programs are "nearly at target-state."

  • December 18, 2025

    Arkansas Social Media Safety Law Temporarily Blocked

    Arkansas cannot enforce a state law that bans social media platforms from using algorithms that could cause a user to kill themselves, buy drugs, become addicted to social media or develop an eating disorder, a federal district judge has ruled.

  • December 18, 2025

    FCC Reworks Reg Framework For Low Power TV

    The Federal Communications Commission on Thursday created a new regulatory framework in hopes of advancing the low-power TV industry.

  • December 18, 2025

    Cigna Faces Class Claims Over Vendor Data Breach

    A Cigna customer has filed a proposed class action in Connecticut federal court that blames the insurer for a data breach that affected a support services vendor between October 2024 and January 2025, leading to the data appearing online and leaving customers at risk of identity theft.

  • December 18, 2025

    Pa. Casino Accused Of Ignoring Data-Tracking Opt-Out

    A proposed class action claims the Rivers Casino in Pittsburgh surreptitiously recorded website visitors' browsing and shared it with third parties, including Facebook and Spotify, even if the users chose to "reject" tracking codes, according to the complaint filed in Pennsylvania state court Wednesday.

  • December 18, 2025

    LinkedIn Data Access Settlement Rejected In Antitrust Case

    A California federal court refused to approve a settlement requiring LinkedIn to stop conditioning access to its data interface on rivals agreeing not to use the data for a competing professional social network, a deal that included no damages but up to $4 million in attorney fees.

  • December 18, 2025

    Car Dealer Credit Check Co. Sued Over Breach Affecting 5.8M

    A company that handles credit inquiries for car dealerships is facing a proposed class action accusing it of negligence, following a cyberattack on its systems in October that compromised the personal information of more than 5.8 million people.

  • December 17, 2025

    Late Plaintiff Substitutions Sink Hospital Health Data Suit

    A Pennsylvania federal judge has dismissed a proposed data breach class action against Thomas Jefferson University Hospitals Inc. over the named plaintiffs purported inability to serve as leaders of the suit, ruling that they had two years to find substitutes.

  • December 17, 2025

    Meta Blamed For Teens' Instagram 'Sextortion' Suicides

    The parents of a 16-year-old boy from Scotland and a 13-year-old boy from Pennsylvania blame Meta and Instagram for their children dying by suicide after being "sextorted" through the photo sharing platform, alleging in a lawsuit Wednesday that the social media companies know the app connects predators to children.

  • December 17, 2025

    29 State AGs Want Unified Meta Youth Addiction Trial

    A group of 29 states and their attorneys general is doubling down on a request in California federal court to hold a single, unified trial in their suit claiming Meta Platforms Inc. is designed to addict and harm minors, saying they have now identified another case where such a singular trial was held involving multiple attorneys general's claims.

  • December 17, 2025

    Ill. Judge Grants Transit Co.'s Bid To Arbitrate GIPA Claims

    An Illinois federal judge sent to arbitration a proposed class action claiming those applying to work for a transit services provider were required to divulge family medical history during a preemployment physical in violation of Illinois' genetic privacy law, finding the lead plaintiff had agreed to arbitrate disputes as part of his application process.

  • December 17, 2025

    Ill. Personal Injury Law Firm Sued Over Data Breach

    A Virginia man alleges in a new proposed class action in Illinois federal court that personal injury law firm TorHoerman Law LLC failed to prevent a cyberattack that exposed his private information to criminals, and that the firm didn't report the attack to the affected people for several months.

  • December 17, 2025

    Adderall Telehealth Startup Indicted After CEO's Conviction

    A San Francisco grand jury has indicted California telehealth startup Done Global, alleging it had a role in a healthcare fraud conspiracy that involved submitting false claims to government health programs and distributing $100 million in Adderall and other drugs through subscription services, federal prosecutors said Wednesday. 

  • December 16, 2025

    La. Social Media Law Violates First Amendment, Judge Rules

    Louisiana cannot enforce a new law that restricts minors' access to social media and bans companies from showing them targeted ads because it is likely unconstitutional and would violate their First Amendment rights, a Louisiana federal judge said Monday.

  • December 16, 2025

    Judge Blocks T-Mobile From Using Tool To Scrape AT&T Data

    A Texas federal judge blocked T-Mobile from using a price tool to scrape data from AT&T's website, saying that without a temporary restraining order T-Mobile would likely continue to enter into AT&T's password-protected software without permission.

Expert Analysis

  • A Primer On NYDFS' 3rd-Party Cybersecurity Guidance

    Author Photo

    The New York Department of Financial Services' recently released comprehensive guidance for registrants on managing cybersecurity risks associated with third-party service providers illustrates why proactive engagement by senior leadership, robust due diligence, strong contractual protections and ongoing oversight are essential to mitigating growing risks, say attorneys at McGuireWoods.

  • Series

    The Law Firm Merger Diaries: How To Build On Cultural Fit

    Author Photo

    Law firm mergers should start with people, then move to strategy: A two-level screening that puts finding a cultural fit at the pinnacle of the process can unearth shared values that are instrumental to deciding to move forward with a combination, says Matthew Madsen at Harrison.

  • Considerations When Invoking The Common-Interest Privilege

    Author Photo

    To successfully leverage the common-interest doctrine in a multiparty transaction or complex litigation, practitioners should be able to demonstrate that the parties intended for it to apply, that an underlying privilege like attorney-client has attached, and guard against disclosures that could waive privilege and defeat its purpose, say attorneys at DLA Piper.

  • Series

    The Law Firm Merger Diaries: Making The Case To Combine

    Author Photo

    When making the decision to merge, law firm leaders must factor in strategic alignment, cultural compatibility and leadership commitment in order to build a compelling case for combining firms to achieve shared goals and long-term success, says Kevin McLaughlin at UB Greensfelder.

  • State AGs May Extend Their Reach To Nat'l Security Concerns

    Author Photo

    Companies with foreign supply-chain risk exposure need a comprehensive risk-management strategy to address a growing trend in which state attorneys general use broadly written state laws to target conduct that may not violate federal regulations, but arguably constitutes a national security threat, say attorneys at Wiley.

  • What To Watch As NY LLC Transparency Act Is Stuck In Limbo

    Author Photo

    Just about a month before it's set to take effect, the status of the New York LLC Transparency Act remains murky because of a pending amendment and the lack of recent regulatory attention in New York, but business owners should at least prepare for the possibility of having to comply, says Jonathan Wilson at Buchalter.

  • Opinion

    Despite Deputy AG Remarks, DOJ Can't Sideline DC Bar

    Author Photo

    Deputy Attorney General Todd Blanche’s recent suggestion that the D.C. Bar would be prevented from reviewing misconduct complaints about U.S. Department of Justice attorneys runs contrary to federal statutes, local rules and decades of case law, and sends the troubling message that federal prosecutors are subject to different rules, say attorneys at HWG.

  • Rule Amendments Pave Path For A Privilege Claim 'Offensive'

    Author Photo

    Litigators should consider leveraging forthcoming amendments to the Federal Rules of Civil Procedure, which will require early negotiations of privilege-related discovery claims, by taking an offensive posture toward privilege logs at the outset of discovery, says David Ben-Meir at Ben-Meir Law.

  • Series

    My Miniature Livestock Farm Makes Me A Better Lawyer

    Author Photo

    Raising miniature livestock on my farm, where I am fully present with the animals, is an almost meditative time that allows me to return to work invigorated, ready to juggle numerous responsibilities and motivated to tackle hard issues in new ways, says Ted Kobus at BakerHostetler.

  • The Future Of Gen AI Training Amid Reddit Data Scraping Suit

    Author Photo

    Reddit's lawsuit against Perplexity AI is not framed as a classic copyright infringement fight, demonstrating that even when companies avoid fair use claims, the path by which training data is obtained is legally consequential, say attorneys at Troutman Pepper.

  • 4chan's US Lawsuit May Affect UK Online Safety Law Reach

    Author Photo

    4chan and Kiwi Farms’ pending case against the Office of Communications in a D.C. federal court, arguing that their constitutional rights have been violated, could have far-reaching implications for the extraterritorial enforcement of the U.K. Online Safety Act and other laws if successful, say lawyers at Taylor Wessing.

  • Litigation Funding Could Create Ethics Issues For Attorneys

    Author Photo

    A litigation investor’s recent complaint claiming a New York mass torts lawyer effectively ran a Ponzi scheme illustrates how litigation funding arrangements can subject attorneys to legal ethics dilemmas and potential liability, so engagement letters must have very clear terms, says Matthew Feinberg at Goldberg Segalla.

  • UK Tribunal's Clearview Decision Expands GDPR Application

    Author Photo

    The Upper Tribunal’s recent decision in Information Commissioner v. Clearview AI is an important ruling on the extraterritorial reach of the European Union and U.K. General Data Protection Regulations, broadening behavioral monitoring to include not only activity by the company, but also its client, says Edward Machin at Ropes & Gray.

  • E-Discovery Quarterly: Recent Rulings On Dynamic Databases

    Author Photo

    Several recent federal court decisions illustrate how parties continue to grapple with the discovery of data in dynamic databases, so counsel involved in these disputes must consider how structured data should be produced consistent with the requirements of the Federal Rules of Civil Procedure, say attorneys at Sidley.

  • Where Crypto Mixing Enforcement Is Headed From Here

    Author Photo

    Recent developments involving crypto mixers, particularly the Tornado Cash verdict, demonstrate that the Justice Department's shift away from regulation by prosecution does not mean total immunity, rather reflecting an approach that prioritizes both innovation and accountability, says David Tarras at Tarras Defense.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.