Cybersecurity & Privacy

  • August 18, 2025

    PepsiCo Lied About Disabling Website Cookies, Suit Says

    PepsiCo Inc. and its Frito-Lay North America Inc. unit are letting third parties like Google and Facebook track browsing activities and collect the information of consumers who visit the food companies' websites, despite consumers selecting "no" to unnecessary cookies, a proposed class action in California federal court alleges.

  • August 18, 2025

    Catching Up With Delaware's Chancery Court

    Executives and board members of Cencora Corp. tentatively settled a stockholder derivative suit for $111.25 million, VectoIQ board members reached a $6.3 million deal on stockholder claims over electric carmaker Nikola's prospects, and class attorneys who secured a $50 million derivative suit settlement saw their proposed 25% attorney fee cut by almost half. Here's the latest from the Delaware Chancery Court.

  • August 18, 2025

    Texas Investigates Meta Over AI Mental Health Services

    The Texas attorney general said his office will investigate Meta AI Studio and Character.AI on allegations they are misleading consumers into thinking their chatbots are mental health tools, according to an announcement issued Monday, which also suggested the companies' activities may violate the state's privacy laws.

  • August 18, 2025

    IRS Sharing Tax Info With ICE Amid Legal Challenge

    The Internal Revenue Service has begun sharing taxpayer return information with U.S. Immigration and Customs Enforcement, the government told a D.C. federal court, revising the tax agency's previous stance that it had not received or responded to any such requests.

  • August 18, 2025

    Insurer, Kennel Settle Coverage Dispute Over Nuisance Claims

    A Hanover unit and a dog kennel have resolved a dispute over coverage for an underlying suit alleging that the kennel's expansion interfered with a Golden State community's rights of possession, according to a California federal court filing.

  • August 18, 2025

    LabMD Fights Dinsmore's Bid To Toss Malpractice Suit

    Now-shuttered LabMD Inc. and its CEO are pushing back against a bid from Dinsmore & Shohl LLP and a legal nonprofit to have a malpractice suit in Georgia federal court tossed, saying they haven't abandoned the case but rather were delayed in pursuing arbitration because they were searching for "competent counsel."

  • August 18, 2025

    Whiteford Taylor Must Face Wire Fraud Malpractice Suit

    A Maryland federal judge has declined to toss the majority of a malpractice and gross negligence suit brought by the founder of a construction company who accused his former business partners and their shared counsel of being partially to blame for hackers stealing his $4 million share of proceeds from the sale of their business.

  • August 15, 2025

    Feds Say $2.8M In Seized Crypto Linked To Ransomware Ploy

    Federal prosecutors say they've seized $2.8 million in crypto from accounts controlled by an alleged ransomware attacker.

  • August 15, 2025

    Lee Subscribers Get Final OK For $9.5M Video Privacy Deal

    An Iowa federal judge has given final approval to a $9.5 million deal to resolve a proposed class action accusing media company Lee Enterprises of illegally disclosing subscribers' video-viewing information to Meta, finding the agreement adequately addresses risks that both sides would have if litigation were to continue.

  • August 15, 2025

    DC Circ. Says $92M Sprint, T-Mobile Privacy Fine Is Here To Stay

    The D.C. Circuit said no way Friday to knocking out $92 million in fines that T-Mobile and Sprint were slapped with for selling users' sensitive location data even after they knew the data was being used inappropriately, saying the fines accounted for the "egregiousness of their conduct."

  • August 15, 2025

    Mich. Bank Keeps Arbitration Win Against Scammed Law Firm

    A marijuana industry-focused law firm must pay its bank nearly $373,000, a deficit sustained after a Nigerian scammer tricked the firm into cashing fraudulent Canadian checks, a Michigan appeals court ruled, rejecting arguments that the bank had a duty to protect the firm "from its own mistakes."

  • August 15, 2025

    Microsoft Unit Agrees To Pay $8.5M In MOVEIt Hack MDL

    A Massachusetts federal judge has preliminarily signed off on an $8.5 million settlement reached between Nuance Communications and more than 1 million patients in multidistrict litigation over a 2023 malware attack that exploited a vulnerability in Progress Software's MOVEIt transfer file tool. 

  • August 15, 2025

    NetChoice Sues Colo. Over Social Media Warnings For Minors

    A trade association representing social media giants Meta, YouTube, Reddit and others claims a Colorado law set to go into effect next year that will require social media platforms to display warning messages for minors is compelled speech in violation of the First Amendment.

  • August 15, 2025

    Auto Shop Says Insurer Hasn't Paid $4.9M In Cyber Coverage

    An auto repair company accused its cyber insurer in Illinois state court of withholding roughly $4.9 million in coverage over a "cyber event" in bad faith, adding it took nearly two years to receive coverage for "undisputed portions" of its total loss, with some portions still outstanding.

  • August 15, 2025

    NY Judge Orders Temu Users To Arbitrate Data Claims

    A New York federal judge ordered a group of plaintiffs accusing online bargain app Temu of privacy violations to arbitrate their claims, saying an arbitration agreement in the company's terms is not unconscionable and that an arbitrator must determine the pact's scope.

  • August 15, 2025

    Judge Tosses GitLab Investors' AI Hype Suit

    Software development collaboration platform GitLab has escaped a lawsuit accusing it of overhyping its artificial intelligence technology, but the California federal judge in charge of the case has given shareholders another chance to demonstrate just how the technology allegedly was not up to snuff.

  • August 15, 2025

    Production Co.'s Subpoena Over Pirated Film Fails At 9th Circ.

    The film production company behind the 2022 film "Fall" on Friday lost its fight at the Ninth Circuit to force Cox Communications to hand over the names of a group of subscribers who allegedly were pirating copies of the film.

  • August 15, 2025

    NY Fines Insurer Healthplex $2M Over Cybersecurity Failures

    A dental insurance provider has agreed to pay a $2 million penalty and undergo an audit of its multifactor authentication controls in order to resolve the New York financial regulator's claims that its failure to implement robust cybersecurity safeguards led to an email phishing attack that exposed customers' sensitive data.

  • August 15, 2025

    AT&T Seeks Approval To Halt Copper Service After Thefts

    AT&T is asking the Federal Communications Commission for emergency authorization to suspend its copper-based phone legacy service for 22 customers outside Dallas, claiming that service outages were caused by a series of copper thefts from its facilities in June.

  • August 15, 2025

    3rd Circ. Won't Rehear Pa. County's Dominion Contract Suit

    The Third Circuit has declined to revisit a ruling that a Pennsylvania county's commissioners lacked standing to sue Dominion Voting Systems over alleged security flaws during the 2020 election.

  • August 15, 2025

    Google Asks 9th Circ. To Rethink Play Store Antitrust Ruling

    Google urged the Ninth Circuit to reconsider a panel's decision to affirm a jury's findings that it monopolized the Android app market, saying the panel made several missteps when evaluating the claims and contended the injunction issued as a result of the verdict goes too far.

  • August 14, 2025

    Banks Ask To Halt 'Unfair' Clock On CFPB Open Banking Rule

    Bank trade groups are asking a Kentucky federal judge to freeze looming compliance deadlines for the Consumer Financial Protection Bureau's contested open banking rule as the agency revamps the measure, while opposing fintech groups called on the White House to block banks from charging them fees for the kind of data-sharing the rule mandates.

  • August 14, 2025

    Fla. Judge Won't Require Snap To Heed Teen Social Media Law

    A Florida federal judge has rejected the state attorney general's bid to force Snap Inc. to comply with a new law that would limit the ability of teens to access the platform, holding that the state's challenge was unlikely to succeed in light of his prior ruling in a related case finding the measure to likely be unconstitutional. 

  • August 14, 2025

    6th Circ. Upholds FCC's Telecom Data Breach Rules

    The Sixth Circuit on Wednesday upheld the Federal Communications Commission's expanded data breach notification rules for telecommunications carriers, rejecting challenges from industry groups who said the 2024 changes were too similar to a 2016 FCC order that Congress rejected under the Congressional Review Act early the following year.

  • August 14, 2025

    2nd Circ. Backs Convictions In ATM-Skimming Ploy

    The Second Circuit on Thursday affirmed the convictions of two men involved in a major ATM card-skimming ring, but said a district court should clarify one defendant's restitution payment schedule.

Expert Analysis

  • Justices' Age Verification Ruling May Lead To More State Laws

    Author Photo

    The U.S. Supreme Court’s recent Free Speech Coalition v. Paxton ruling, permitting a Texas law requiring certain websites to verify users’ ages, significantly expands states' ability to regulate minors’ social media access, further complicating the patchwork of internet privacy laws, say attorneys at Troutman.

  • E-Discovery Quarterly: Rulings On Relevance Redactions

    Author Photo

    In recent cases addressing redactions that parties sought to apply based on the relevance of information — as opposed to considerations of privilege — courts have generally limited a party’s ability to withhold nonresponsive or irrelevant material, providing a few lessons for discovery strategy, say attorneys at Sidley.

  • How DOJ's New Data Security Rules Leave HIPAA In The Dust

    Author Photo

    The U.S. Department of Justice's recently effective data security requirements carry profound implications for how healthcare providers collect, store, share and use data — and approach vendor oversight — that go far beyond the Health Insurance Portability and Accountability Act, say attorneys at Nelson Mullins.

  • Opinion

    Section 1983 Has Promise After End Of Nationwide Injunctions

    Author Photo

    After the U.S. Supreme Court recently struck down the practice of nationwide injunctions in Trump v. Casa, Section 1983 civil rights suits can provide a better pathway to hold the government accountable — but this will require reforms to qualified immunity, says Marc Levin at the Council on Criminal Justice.

  • Courts Redefining Software As Product Generates New Risks

    Author Photo

    A recent wave of litigation against social media platforms, chatbot developers and ride-hailing companies has some courts straying from the traditional view of software as a service to redefining software as a product, with significant implications for strict liability exposure, say attorneys at Reed Smith.

  • Now Is The Time To Prep For SEC's New Data Breach Regs

    Author Photo

    Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

  • How Banks Can Harness New Customer ID Rule's Flexibility

    Author Photo

    Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

  • Series

    Playing Soccer Makes Me A Better Lawyer

    Author Photo

    Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

  • How Trump Cybersecurity EO Narrows Biden-Era Standards

    Author Photo

    President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

  • Opinion

    The SEC Should Embrace Tokenized Equity, Not Strangle It

    Author Photo

    The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

  • And Now A Word From The Panel: Back In Action

    Author Photo

    A lack of new petitions at the May hearing session of the Judicial Panel on Multidistrict Litigation caught many observers' attention — but a rapid uptick in petitions scheduled to be heard at this week's session illustrates how panel activity always ebbs and flows, says Alan Rothman at Sidley.

  • Compliance Changes On Deck For Banks Under Texas AI Law

    Author Photo

    Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

  • Series

    Law School's Missed Lessons: Learning From Failure

    Author Photo

    While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

  • 23andMe Fine Signals ICO's New GDPR Enforcement Focus

    Author Photo

    Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

  • Midyear Rewind: How Courts Are Reshaping VPPA Standards

    Author Photo

    The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.