Cybersecurity & Privacy

  • November 21, 2025

    Ruger's $1.5M Data Breach Deal Heads For Final OK

    A proposed class of data breach victims has asked a federal judge to issue final approval of a $1.5 million settlement with Connecticut-based gunmaker Sturm, Ruger & Co. and a New Jersey web developer, along with $500,000 in fees to attorneys with four firms including Siri & Glimstad LLP.

  • November 21, 2025

    Rothman Orthopaedics Hit With Pa. Wiretapping Lawsuit

    Rothman Orthopaedics has been hit with a proposed class action in Pennsylvania alleging the company violated state wiretapping laws by intercepting private healthcare information on its website using a third-party tracking pixel.

  • November 21, 2025

    Mich. Atty Fights Defamation Suit From Election Investigator

    A Michigan attorney has said any statements that a cybersecurity firm claims she made to scuttle its president's job prospects with the Pennsylvania Legislature are protected speech on a matter of public concern, urging a federal judge to dismiss a suit the firm brought after it told her it found no evidence of fraud in the 2020 presidential election.

  • November 21, 2025

    Mich. Mortgage Co. Hit With Data Breach Class Actions

    A Michigan mortgage lender was hit with several proposed data breach class actions that alleged in Michigan federal court that the lender failed to do enough to protect consumers' personally identifiable information, such as their Social Security numbers, from a June data breach.

  • November 21, 2025

    DOJ Will Speed Some Classified Discovery In Bolton Case

    Federal prosecutors agreed Friday to accelerate their classified discovery timeline in the prosecution of John Bolton, as a Maryland federal judge pressed them to move faster.

  • November 21, 2025

    SEC, Virtu To Settle Customer Data Suit For $2.5M

    Virtu Financial Inc. has agreed to pay the U.S. Securities and Exchange Commission $2.5 million for allegedly failing to safeguard customer information, according to a Friday proposed final order that would end the regulator's two-year-old suit against the broker-dealer.

  • November 21, 2025

    1st Circ. Clears IT Co. In Suit Over Zoll Patient Data Breach

    An information technology company cannot be held liable for a data breach exposing the health information of patients of a unit of medical device maker Zoll Medical Corp, the First Circuit ruled, because the two companies did not have a business relationship permitting them to hold one responsible for another's conduct.

  • November 20, 2025

    Renewed Federal Push To Block State AI Laws Faces Backlash

    The Trump administration is pushing to revive a failed effort to stop states from regulating artificial intelligence systems, drawing opposition from California's data privacy regulator, consumer advocates and others that argue it's crucial for states to retain their ability to put guardrails on the emerging technology in the wake of continued federal inaction.

  • November 20, 2025

    Meta Will Pay $190M, Change Policies To End $8B Privacy Suit

    Meta Platforms Inc. has agreed to pay $190 million, as well as enhance its whistleblower program and implement a new code of conduct and insider trading policy, as part of a proposed settlement in an $8 billion privacy suit tied to the Cambridge Analytica scandal, according to several new filings Thursday.

  • November 20, 2025

    Roblox Can't Get Teen Grooming Suit Arbitrated

    A California state judge said Roblox couldn't compel a minor to arbitrate his claims that he was targeted and exploited by a sexual predator on the online gaming platform, saying that a recent federal law aimed at ending forced arbitration in sexual assault and harassment cases isn't limited to workplaces.

  • November 20, 2025

    Journalist Jailed For Contempt, Fined For Stealing Court Mug

    A Texas federal judge ordered U.S. marshals Thursday to haul a onetime conservative journalist to a nearby jail for contempt of court and separately fined him $1,000 for stealing a court coffee mug, saying he had had it with the defendant's "shenanigans."

  • November 20, 2025

    1st Circ. Tosses Challenge To Maine Lobster Boat Tracking

    The First Circuit has declined to revive a case brought by several Maine lobstermen who said their privacy rights were violated by the state's tracking of their vessels, ruling that the tracking devices were part of administrative searches of a closely regulated industry and do not violate the Fourth Amendment.

  • November 20, 2025

    Data Breach Suit Against Circle K Franchisee Wraps Up

    A group of ex-workers who sued a franchisee of gas and convenience store chain Circle K over a May 2024 data breach have agreed to end their proposed class action, according to a Georgia federal court filing. 

  • November 20, 2025

    Ill. Justices Back Walgreens In Receipt Class Standing Fight

    A Walgreens customer looking to hold the company liable for allegedly printing too much financial information on consumers' receipts should not have won class certification in her case because she lacked standing to bring her claims, the Illinois Supreme Court said Thursday.

  • November 20, 2025

    Adidas Must Face Claim It Shared Info With Microsoft, TikTok

    A California federal judge has denied a motion from Adidas to toss a proposed class action alleging the apparel company violated a California privacy statute by placing tracking pixels from TikTok Pixel and Microsoft Bing on its website, finding the trackers plausibly constitute a "pen register" under state law. 

  • November 20, 2025

    FCC Rescinds Contested Biden-Era Cybersecurity Ruling

    The Federal Communications Commission on Thursday reversed a ruling made late in the Biden administration that required new steps from telecoms to beef up cybersecurity, even as an FCC Democrat decried the move as gutting the agency's response to the Salt Typhoon cyberattack.

  • November 20, 2025

    Fed. Circ. Shoots Down Bot Patent Claim In Google Challenge

    The Federal Circuit on Thursday reversed the Patent Trial and Appeal Board's finding that upheld one of the claims in a Nobots LLC's bot-detecting patent challenged by Google, finding that the PTAB incorrectly interpreted the claim.

  • November 20, 2025

    SEC Walks Away From SolarWinds Data Breach Case

    The U.S. Securities and Exchange Commission announced Thursday that it was voluntarily dismissing a lawsuit accusing software developer SolarWinds Corp. and its chief information security officer of failing to warn investors about lax cybersecurity standards prior to suffering a massive data breach.

  • November 20, 2025

    Cybersecurity Co. Axonius Names 1st GC From Azra Games

    Cybersecurity company Axonius Inc. has found its first general counsel in a veteran legal leader who has worked at software and technology companies including Azra Games and Iterable as it prepares for an initial public offering.

  • November 20, 2025

    Ex-SDNY Chief Rejects Claim Of Broken FTX Plea Promise

    Former interim Manhattan U.S. Attorney Danielle Sassoon told a federal judge Thursday that she never promised crypto lobbyist Michelle Bond any kind of no-prosecute deal as the government negotiated a guilty plea with Bond's husband, former FTX executive Ryan Salame.

  • November 19, 2025

    29 AGs Want Social Media Addiction Fight Decided In 1 Trial

    A coalition of 29 state attorneys general Wednesday urged a California federal judge presiding over social-media addiction multidistrict litigation to consolidate state law claims into a single jury trial, while Meta's counsel argued that there's no case law precedent for such a single trial and it would be prejudicial.

  • November 19, 2025

    Calif. Privacy Agency Targets Data Brokers With 'Strike Force'

    The California Privacy Protection Agency is stepping up its oversight of the data broker industry, revealing Wednesday that it is establishing a dedicated "strike force" within its enforcement division to monitor whether these companies are meeting registration requirements and properly handling consumers' personal data.

  • November 19, 2025

    Amazon Alexa Users Win Cert. Of 1.2M-Member BIPA Class

    An Illinois federal judge has certified a class of roughly 1.2 million users of Amazon's Alexa in litigation accusing the e-commerce giant of unlawfully collecting their biometric voice data, allowing two people to serve as representatives for those in the state for whom Amazon allegedly created voiceprints.

  • November 19, 2025

    DaVita Reaches Tentative Deal In Patients' Data Breach Suit

    DaVita Inc. has reached a settlement in principle with current and former patients of the healthcare company who alleged in Colorado federal court that it did not adequately protect their personal information, resulting in an April data breach.

  • November 19, 2025

    Mich. Judge Questions AG's Role In Roku Privacy Suit

    A Michigan federal judge on Wednesday questioned the state attorney general's authority to pursue privacy violation claims against Roku Inc. on behalf of residents and children, saying that such allegations can also be brought as a private class action.

Expert Analysis

  • Breaking Down Novel Va. Social Media Law For Minors

    Author Photo

    While a Virginia bill passed in May is notable for setting a one-hour daily limit on minors' use of social media, other provisions create compliance burdens for social media operators and app store providers, and increase privacy and security risks associated with the collection of sensitive information to prove identity, says Jenna Rode at Hunton.

  • Litigation Inspiration: How To Respond After A Loss

    Author Photo

    Every litigator loses a case now and then, and the sting of that loss can become a medicine that strengthens or a poison that corrodes, depending on how the attorney responds, says Bennett Rawicki at Hilgers Graben.

  • DOJ Crypto Enforcement Is Shifting To Target Willfulness

    Author Photo

    Three pending criminal prosecutions could be an indication of how the U.S. Department of Justice's recent digital assets memo is shaping enforcement of the area, and show a growing focus on executives who knowingly allow their platforms to be used for criminal conduct involving sanctions offenses, say attorneys at Gibson Dunn.

  • How NJ's Proposed Privacy Rules Could Reshape AI Data Use

    Author Photo

    Although not revolutionary, New Jersey's proposed privacy rules would create obligations around the management and processing of consumer personal data that will require careful planning before they can be successfully implemented, say attorneys at Norton Rose.

  • The Metamorphosis Of The Major Questions Doctrine

    Author Photo

    The so-called major questions doctrine arose as a counterweight to Chevron deference over the past few decades, but invocations of the doctrine have persisted in the year since Chevron was overturned, suggesting it still has a role to play in reining in agency overreach, say attorneys at Crowell & Moring.

  • Business Takeaways Following CCPA Enforcement Actions

    Author Photo

    Advisories and recent enforcement activity by the California Privacy Protection Agency against Honda and Todd Snyder underscore the agency's enforcement interest in the intersection of data minimization and consumer rights, and could make it more challenging for a business to provide a streamlined consumer rights process, say attorneys at Covington.

  • EU Space Act Could Stifle US Commercial Operators

    Author Photo

    The EU Space Act, proposed last month, has the potential to raise global standards for safety and sustainability in space, but the U.S. and EU need to harmonize their regulatory approaches to avoid imposing regulatory burdens that undermine commercial innovation and agility, say Jessica Noble and Adriane Mandakunis at Aegis Space Law.

  • Unpacking Enforcement Challenges Of DOJ's Bulk Data Rule

    Author Photo

    Now fully effective, the U.S. Department of Justice's new data security program represents the U.S.' first data localization requirement ripe for enforcement, but its implementation faces substantial practical challenges that may hinder the DOJ's ability for wide-ranging or swift action, say attorneys at Cleary.

  • Nuclear Stakeholders Must Prepare For Cyber Threats

    Author Photo

    As the White House signals its support for a revival of nuclear power to supply the power needs of data centers and the artificial intelligence industry, investors and operators must keep in mind that safeguarding nuclear infrastructure from evolving cyber threats will be essential, say attorneys at A&O Shearman.

  • Series

    Playing Mah-Jongg Makes Me A Better Mediator

    Author Photo

    Mah-jongg rewards patience, pattern recognition, adaptability and keen observation, all skills that are invaluable to my role as a mediator, and to all mediating parties, says Marina Corodemus.

  • Lively-Baldoni Saga Highlights Insurance Coverage Gaps

    Author Photo

    The ongoing legal dispute involving "It Ends With Us" co-stars Justin Baldoni and Blake Lively raises coverage questions across various insurance lines, showing that effective coordination between policies and a clear understanding of potential gaps are essential to minimizing unexpected exposures, says Katie Pope at Liberty Co.

  • FTC Staff Cuts Unlikely To Curb Antitrust Enforcement Agenda

    Author Photo

    While Federal Trade Commission Chair Andrew Ferguson's recent commitment to reducing agency staff may seem at odds with the Trump administration's commitment to antitrust enforcement, a closer analysis shows that such reductions have little chance of derailing the president's efforts, say attorneys at Squire Patton.

  • Series

    Law School's Missed Lessons: Navigating Client Trauma

    Author Photo

    Law schools don't train students to handle repeated exposure to clients' traumatic experiences, but for litigators practicing in areas like civil rights and personal injury, success depends on the ability to view cases clinically and to recognize when you may need to seek help, says Katie Bennett at Robins Kaplan.

  • 5 Things Manufacturing GCs Should Know About Cyber Risk

    Author Photo

    Following a recent government report underscoring the growing cyber threat landscape for manufacturers, general counsel in the sector should be aware of the potentially broad consequences of a cyberattack, evolving notification systems and the need for incident response plans, say attorneys at Alston & Bird.

  • Challenging A Class Representative's Adequacy And Typicality

    Author Photo

    Recent cases highlight that a named plaintiff cannot certify a putative class action unless they can meet all the applicable requirements of the Federal Rules of Civil Procedure, so defendants should consider challenging a plaintiff's ability to meet typicality and adequacy requirements early and often, say attorneys at Womble Bond.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.