Cybersecurity & Privacy

  • October 29, 2026

    Fed. Circ. Upholds Decision Wiping Out Cybersecurity Patent

    The Federal Circuit on Thursday affirmed a Patent Trial and Appeal Board decision holding that a patent covering methods of monitoring a system for cyberattack detection was invalid as obvious.

  • October 29, 2026

    Troutman, Baker McKenzie Report Data Breaches

    Troutman Pepper Locke LLP and Baker McKenzie experienced data breaches last month as a result of social engineering attacks, according to notices submitted this week to the attorneys general offices in California and Texas.

  • October 29, 2026

    Google Cut Worker's Duties After Military Leave, Feds Say

    Google failed to reinstate a former employee to a similar role after he returned from a yearlong stint in the U.S. Army's Cyber Command unit and eventually laid him off, according to a lawsuit the U.S. Department of Justice filed Thursday in Manhattan.

  • October 29, 2026

    US Bankruptcy Noticing System Back Up After Cyber Event

    A BAE Systems Inc. spokesperson said in a statement Thursday the nationwide Bankruptcy Noticing Center has resumed operations following a cybersecurity incident that had brought the system to a halt earlier this month.

  • October 29, 2026

    States Say GM Will Pay $220M To Settle Driver Privacy Claims

    Attorneys general said Thursday that General Motors will pay $220 million to three dozen states to settle claims that it illegally sold nearly 10.3 million drivers' behavior data and location information to third parties, including data brokers that passed it on to insurers.

  • October 29, 2026

    5th Circ. Will Review Texas Content-Filtering Law Ruling

    The Fifth Circuit has granted Texas' request for an en banc rehearing of a July panel opinion that partly upheld a block on the state's new law requiring companies to filter content for underage users.

  • October 28, 2026

    CFTC's Selig Vows 'Grounded' Oversight Of Agentic Finance

    U.S. Commodity Futures Trading Commission Chairman Michael Selig said Wednesday that his agency plans to take a "grounded" approach to agentic finance that's also mindful of the risks it poses and courted industry feedback on how to address the rise of artificial intelligence in derivative markets.

  • October 28, 2026

    Product Liability's Regulatory & Legislative Recap So Far

    Over the summer and early fall, lawmakers proposed measures aimed at putting safeguards around the rapidly growing industry of artificial intelligence, as public concerns over its safety climb in tandem. The new nominee to head the U.S. Food and Drug Administration also faced sharp queries over her views on vaccines and birth control.

  • October 28, 2026

    CFPB Audit Flags Cybersecurity Gaps Amid Staff Departures

    The Consumer Financial Protection Bureau has failed to promptly fix serious cyber weaknesses and consistently track data in its possession as staffing losses have hampered the agency's ability to safeguard its systems, according to a federal watchdog audit released Wednesday.

  • October 28, 2026

    Patients Seek OK Of Connecticut Rehab Data Breach Deal

    Patients accusing a Connecticut medical rehab network of waiting almost a year to disclose a cyberattack have asked a state court judge to preliminarily bless a deal that would provide about 61,000 people up to $2,500 in cash, plus $1 million in identity theft insurance.

  • October 28, 2026

    Jury Selection Starts In 2nd Social Media Bellwether In LA

    Jury selection began Wednesday in a California courtroom for the second bellwether trial focused on allegations that major social media companies are harming the mental health of children, with Meta Platforms Inc. returning to the defense table next to Snap Inc., which is facing jurors on the claims for the first time.

  • October 28, 2026

    Proskauer, Reddit Attys Called To Testify In Data-Scraping Suit

    A New York federal judge on Wednesday called for live testimony from two Proskauer Rose LLP attorneys and Reddit's deputy general counsel as he weighs the law firm's bid to represent Perplexity AI in a lawsuit from Reddit, the firm's former client, over alleged data scraping.

  • October 28, 2026

    Denver Law Firm Sued Over Delayed Data Breach Notice

    A Denver law firm was hit with a proposed class action in Colorado federal court Tuesday from an Oklahoma man accusing it of allowing his and thousands of others' personally identifiable information to be stolen in a cyberattack.

  • October 28, 2026

    FTC Probes Delta, Uber, Others Over Data-Driven Pricing

    The Federal Trade Commission is pressing Delta, Uber, Target and a half-dozen other companies to detail how they're using personal data to set individualized pricing for consumers and compensation for workers, marking the latest escalation of the agency's growing scrutiny of the increasingly prominent business practice.

  • October 28, 2026

    DOD Contractor Owes $1.2M In Whistleblower Suit, Jury Says

    An ex-employee of a U.S. Department of Defense contractor won a $1.2 million award after a Colorado federal jury found the contractor liable for wrongful discharge and violations of the Defense Contractor Whistleblower Protection Act, according to the final judgment, entered Wednesday. 

  • October 28, 2026

    Watchdog Seeks Privacy Guardian In Character.AI Ch. 11 Sale

    The U.S. Trustee's Office said a Delaware bankruptcy judge must appoint a consumer privacy ombudsman to review the sale of artificial intelligence entertainment platform Character Technologies' assets, saying its Character.AI platform includes identifiable information from users' chats.

  • October 28, 2026

    4th Circ. Judge Sees 'Big Brother' In Va. Social Media Limits

    A Fourth Circuit judge Wednesday expressed concern with a Virginia law limiting children's access to social media, telling counsel for the commonwealth that the provision has a "Big Brother atmosphere" to it and suggesting he'd back the district court's injunction halting enforcement of the regulation.

  • October 28, 2026

    Meta Wants Ex-WhatsApp Security Head's Suit Axed For Good

    Meta has urged a California federal judge to permanently dismiss a whistleblower retaliation suit from a former cybersecurity head for WhatsApp, saying the fourth version of his complaint repleads theories the court has tossed and still doesn't show the managers responsible for the alleged retaliation knew about his claimed protected activity.

  • October 28, 2026

    Texan Claims Austin Firm Hasn't Alerted Him To Data Breach

    Linebarger Goggan Blair & Sampson LLP, an Austin, Texas-based law firm focused on collecting debts and taxes for public-sector clients, failed to protect its clients' personal information from a data breach, the plaintiff in a proposed class action claimed in Texas federal court Tuesday.

  • October 27, 2026

    Mass. Hospitals Sue Lilly Over 340B Discount Data 'Extortion'

    A group of Massachusetts hospitals claim drugmaker Eli Lilly & Co. unlawfully holds hostage medication discounts meant to benefit low-income patients by demanding that hospitals hand over sensitive patient claims data or pay "exorbitant" inflated prices, according to a lawsuit filed Tuesday in Boston federal court.

  • October 27, 2026

    Anthropic's 'Existential Risks' Warning Sets Stage For AI IPOs

    Anthropic PBC's registration statement includes more than 90 pages of risk disclosures for prospective investors ahead of the Claude developer's planned public offering, including "existential risks to humanity" posed by advanced artificial intelligence and a corporate governance structure the company warns may make it difficult for voting shareholders to replace directors and managers.

  • October 27, 2026

    Google Class Attys Get $2M In $8.25M Kids' App Tracking Deal

    A California federal judge has awarded class counsel just over $2 million in fees and expenses as part of an $8.25 million deal to resolve a proposed class action accusing Google of surreptitiously tracking children's online activity, despite expressing "some concern" that the rates and hours billed by one plaintiffs' firm was "excessive" and rejecting some of the firm's travel expenses. 

  • October 27, 2026

    Milliman Reaches $15.5M Deal In Life Insurance FCRA Suit

    Risk management firm Milliman Inc. is set to pay $15.5 million to resolve a consumer class action accusing the company of peddling flawed information to life insurance companies, according to a proposed settlement that the plaintiffs filed for preliminary court approval in Washington federal court on Monday.

  • October 27, 2026

    Google Can't Dodge Ex-NPR Host's AI Voice Misuse Suit

    Google cannot escape former NPR "Morning Edition" co-host David Greene's lawsuit alleging the tech giant misappropriated his voice in an artificial intelligence podcasting product, a California judge ruled.

  • October 27, 2026

    Snapchat Accused Of Letting Predators Exploit Kids

    The company behind the popular app Snapchat has been sued in Philadelphia court by a group of parents alleging that the platform allowed predators to sexually exploit their children while at the same time holding itself out to be a safe place for kids.

Expert Analysis

  • Series

    Being In The Peace Corps Made Me A Better Lawyer

    Author Photo

    When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.

  • Immunity May Not Protect Gov't-Backed Cyber Operators

    Author Photo

    Companies considering participation in a National Coordination Center program that authorizes private actors to conduct offensive cyber operations on the government’s behalf should understand the limits of sovereign immunity and the operational and legal risks lurking in the details and undefined parameters of the program, say attorneys at Steptoe.

  • White House AI Accord Could Reshape Reasonable Care

    Author Photo

    President Donald Trump's recent joint commitment on frontier responsibilities — signed by leaders of Google, Anthropic, Meta and more — may pose legal risks for nonsignatories, as businesses using artificial intelligence may find the accord's safeguards cited against them as evidence of what reasonable care requires, says Peter Schildkraut at Arnold & Porter.

  • OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

    Author Photo

    The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

  • Protecting Trade Secrets When AI Agents Go Rogue

    Author Photo

    In light of a recent incident in which artificial intelligence agents compromised parts of Hugging Face's production systems, and the uncertain court guidance surrounding liability in such situations, companies looking to update their trade secret protections should carefully examine agents' permissions and technical limitations, says Matt Nealon at Marshall Gerstein.

  • Planning For D&O Exclusions As Risks Mount For Banks

    Author Photo

    Banks should scrutinize directors and officers exclusions for artificial intelligence, disclosure and cybersecurity risks during policy renewal negotiations to preserve coverage amid the current uptick in insurer scrutiny and related shareholder litigation, say attorneys at Jones Walker.

  • CFIUS Annual Report Reveals Enforcement Trends

    Author Photo

    The Committee on Foreign Investment in the United States' recently published annual report to Congress shows that it is increasingly focused on nonnotified transactions, mandatory filing compliance, critical technologies and postclosing mitigation enforcement across the full life cycle transactions, say attorneys at Bass Berry.

  • Series

    Fintech Regulator Outlook: Collaboration In North Dakota

    Author Photo

    The recent speed of new digital asset products entering the market continues to introduce compliance challenges, so regulators and companies alike must examine the intersection of artificial intelligence, cybersecurity, collaboration and modernization to navigate regulatory complexity, says Lise Kruse at the North Dakota Department of Financial Institutions.

  • Terminix Deal Shows Risks Of Calif. Aggregating Local Lapses

    Author Photo

    California district attorneys’ novel use of an unfair competition law to merge unrelated local enforcement matters against pest control providers Rentokil and Terminix into one recently settled statewide case demonstrates that lack of adequate communication between facilities and corporate compliance managers may cause isolated regulatory violations to snowball into larger challenges, say attorneys at Kazmarek Mowrey.

  • What Lawyers Should Know Before Accepting Crypto Payment

    Author Photo

    As clients increasingly request to pay legal fees, retainers and escrow funds using cryptocurrency, lawyers should consider how only a handful of state bar authorities have addressed the issue with varying ethics opinions, as well as the related questions that no authority has yet answered, says attorney Felix Shipkevich.

  • What To Know As State 'Neural Data' Privacy Laws Emerge

    Author Photo

    Attorneys at Goodwin discuss new state laws aimed at regulating consumer data generated from nervous system activity, explain why neurotechnology is attracting state and federal legislators’ attention, and highlight the compliance obligations that industry players should address now.

  • Data Sale In Spirit Bankruptcy Raises Novel Privacy Risks

    Author Photo

    Spirit Airlines' planned sale of deidentified business data to Google for artificial intelligence training exposes gaps in the Bankruptcy Code's privacy guardrails, particularly for employee information, say attorneys at Patterson Belknap.

  • Fighting Class Cert. In Wash. False Email Promo Cases

    Author Photo

    Retailers facing a recent wave of class actions alleging their email promotions violated the Washington Commercial Electronic Mail Act may be able to demonstrate that sending individualized, customer-specific messages produced experiences too diverse to be adjudicated on a classwide basis, say attorneys at Benesch.

  • Series

    Calif. Banking Brief: All The Notable Legal Updates In Q3

    Author Photo

    California's financial regulators spent the third quarter of 2026 focusing on consumer protection enforcement at home while resisting federal efforts to displace state oversight — reinforcing the state's intention to shape the compliance landscape for institutions operating within its borders despite federal deregulatory trends, say attorneys at Ropes & Gray.

  • IDScan Data Breach Puts Spotlight On Vendor Oversight

    Author Photo

    A recently reported breach that exposed millions of identification documents held by IDScan.net highlights the liability risks for businesses that contract with third-party identity processors, and emphasizes the importance of auditing vendors' data retention practices, say attorneys at Tucker Ellis.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.