Cybersecurity & Privacy

  • March 26, 2026

    NC Suit Says Real Estate Co. Cyberattack Notice Took Months

    A real estate company faces a purported class action in North Carolina's Business Court accusing the firm of waiting months to notify its customers of a data breach in September and failing to disclose what kind of information was stolen.

  • March 25, 2026

    Law Firm Ransomware Attacks On Rise, Report Says

    Cyberattacks targeting law firms jumped in 2025, according to a new BakerHostetler report, which also highlighted recent spikes across a wide range of sectors in ransomware payments and class action lawsuits stemming from these incidents. 

  • March 25, 2026

    Cruise Booker's Brass Must Face $47M TCPA Default Citation

    A vacation booking company's four principals must answer an Illinois class's asset citation bid as it works to collect a $47 million default judgment in a "troubling" 11-year-old Telephone Consumer Protection Act case, a federal judge ruled.

  • March 25, 2026

    Justices' Music Piracy Ruling Could Reverberate Beyond ISPs

    The U.S. Supreme Court's ruling that Cox Communications is not liable for its customers' music piracy circumscribes the theories copyright owners may pursue for secondary infringement — limits that attorneys say will extend beyond internet service providers and influence litigation involving e-commerce platforms and artificial intelligence.

  • March 25, 2026

    Cognizant Must Face Clorox's $380M Suit Over Login Sharing

    A California state judge has trimmed Clorox's $380 million lawsuit accusing the cybersecurity company Cognizant of enabling a "catastrophic" 2023 cyberattack by voluntarily handing over Clorox employee passwords after hackers merely asked for them, tossing an intentional misrepresentation claim but keeping the bulk of the suit alive.

  • March 25, 2026

    Extreme Networks Must Face Suit Over COVID-Era Demand

    A California federal judge rejected Extreme Networks' bid to dismiss a suit alleging it misled investors about its financial prospects and declining client demand during the COVID-19 pandemic, saying the investors adequately pled that the cloud network equipment company engaged in a scheme to inflate revenues through so-called channel-stuffing.

  • March 25, 2026

    Anime Biz Allowed Breach Of 6.8M Email Addresses, Suit Says

    An anime streaming service's inadequate data security allowed hackers to gain access to an alleged 6.8 million unique email addresses and exfiltrate other personal information of subscribers, according to a proposed class action in California federal court.

  • March 25, 2026

    House Panel Advances Bill To Re-Up FirstNet Until 2037

    U.S. House committee lawmakers voted unanimously Wednesday to reauthorize the First Responder Network Authority for more than a decade past its current sunset next February while adding two seats to the board for public safety experts.

  • March 25, 2026

    NJ Gov. Sherrill Signs Trio Of Bills To Protect Immigrants

    New Jersey Gov. Mikie Sherrill signed on Wednesday three bills intended to limit state cooperation with federal immigration enforcement, strengthen privacy protections and require law enforcement officers — including federal agents — to identify themselves during public interactions.

  • March 25, 2026

    Meta Gets Class Suit Over Scam Investment Ads Axed, For Now

    A California federal judge dismissed a proposed class action against Meta over ads on its platforms from scammers impersonating financial professionals to run pump-and-dump investment schemes, saying unlike recent cases that could "disrobe" Meta of immunity under Section 230 of the Communications Decency Act, the plaintiffs didn't allege Meta co-created the ads.

  • March 25, 2026

    Sen. Scott Sues Booz Allen, IRS Leaker Over Data Breach

    U.S. Sen. Rick Scott, R-Fla., has sued federal contractor Booz Allen Hamilton and a former employee for leaking his tax returns along with a trove of confidential tax data on President Donald Trump and other wealthy people, adding to mounting litigation over the breach.

  • March 25, 2026

    Jury Doubles Damages Against Meta, Google In LA Bellwether

    A California state jury that found Meta and Google liable Wednesday for harming the mental health of a woman who says she became addicted to their social media platforms as a child delivered a second blow later in the day, awarding $3 million in punitive damages on top of a $3 million compensatory award.

  • March 25, 2026

    High Court Reverses Music Piracy Liability Ruling Against Cox

    The U.S. Supreme Court on Wednesday said the Fourth Circuit incorrectly affirmed a jury verdict that found Cox Communications liable for its customers' music piracy, concluding there is a legal distinction between mere knowledge of infringement and intent to promote it.

  • March 24, 2026

    Pentagon 'Punishing' Anthropic Would Be Illegal, Judge Says

    A California federal judge considering Anthropic's request to block the U.S. Department of Defense from labeling it a supply chain national security risk said Tuesday that it looks like the government is "punishing" Anthropic for bringing public attention to their contract fight, a move that would violate the First Amendment.

  • March 24, 2026

    Trump Admin Settles Suit Over Biden Social Media Collabs

    The Trump administration on Tuesday agreed to bar three federal agencies from interfering with social media companies' content moderation, resolving a high-profile challenge to the Biden administration's efforts to combat the spread of misinformation in a case that went up to the U.S. Supreme Court.

  • March 24, 2026

    Meta Tackles Borrowed Underwear Analogy In Privacy Suit

    A California federal judge mulling Meta's argument that its users' consent bars a proposed privacy class action pressed Meta's lawyers Tuesday on whether social expectations affect the bounds of that consent, observing that if she gave a friend permission to borrow her clothes, "I don't expect her to borrow my underwear."

  • March 24, 2026

    Baltimore Takes XAI To Court Over Grok's Sexual Deepfakes

    Baltimore on Tuesday became one of the first municipalities to sue Elon Musk's xAI over the Grok artificial intelligence platform's ability to transform ordinary photographs into nonconsensual sexualized deepfake images, including creating child sexual abuse material, saying it's exposing city residents to degrading content, harassment and psychological harm.

  • March 24, 2026

    BofA Wants Customer Suit Over Post-Jan. 6 Data Sharing Axed

    Bank of America has asked a Florida federal judge to toss a proposed class action accusing it of financial privacy violations tied to the aftermath of the Jan. 6, 2021, U.S. Capitol attack, arguing the U.S. Supreme Court has held that bank customers do not have ownership or expectations of privacy over their bank account records.

  • March 24, 2026

    FINRA CEO Highlights New Clearinghouse For Cyber Threats

    Robert Cook, CEO of the Financial Industry Regulatory Authority, said Tuesday that it will soon be rolling out a clearinghouse for firms to report cybersecurity threats and to promote information sharing across the industry.

  • March 24, 2026

    IT Co. Says Fed. Circ. Ruling Blesses 'Moving Target' Records

    An IT contractor said the Federal Circuit should reconsider a panel ruling upholding the U.S. Department of Commerce's authority to unilaterally take corrective action during litigation over a $1.5 billion procurement, warning it threatens to "devastate the bid protest process."

  • March 24, 2026

    Heritage Bank Client Alleges 'Unsecure' Servers Led To Breach

    A Heritage Bank customer claimed in a putative class action Tuesday that the Washington-based financial institution failed to properly guard users' personal data that was stolen in a March 1 cyberattack, alleging the company used substandard security practices and failed to update its systems on a timely basis.

  • March 24, 2026

    Wash. Mandates AI Content Flags, Suicide Safeguards

    Washington Gov. Bob Ferguson signed a pair of bills on Tuesday requiring large artificial intelligence companies to embed data that distinguishes deepfakes as AI-generated and forcing companion chatbot developers to take steps to protect minor users from suicide and self-harm.

  • March 24, 2026

    Snap Suit Tossed For State Enforcement Action Interference

    A Utah federal judge on Tuesday dismissed Snap Inc.'s suit against two state officials aiming to block a state enforcement action, finding that the court must abstain while that enforcement action is pending.

  • March 24, 2026

    Fiserv, Credit Union Settle Payment Data Security Lawsuit

    Fiserv Solutions LLC and Cencap Federal Credit Union have "tentatively settled" a Connecticut federal lawsuit accusing the payment processor and fintech provider of operating an online banking platform that contained security flaws.

  • March 24, 2026

    Meta Owes $375M In NM Trial Over Harm To Teens

    A New Mexico jury said Tuesday that Meta must pay $375 million over the state attorney general's bellwether claims that the social media giant hid the full scope of mental health harm its apps were causing to underage users.

Expert Analysis

  • 5 Advertising Law Trends That Will Shape 2026

    Author Photo

    The legal landscape for advertisers will grow only more complex this year, with ongoing trends including a federal regulatory retreat, more aggressive action by the states, a focus on child privacy and expanded scrutiny of "natural" claims, say attorneys at Reed Smith.

  • Series

    Calif. Banking Brief: All The Notable Legal Updates In Q4

    Author Photo

    The regulatory and litigation developments for California financial institutions in the fourth quarter of 2025 were incremental but consequential, with the Department of Financial Protection & Innovation relying on public enforcement actions to articulate expectations, and lawmakers and privacy regulators playing a role as well, says Stephen Britt at Stinson.

  • Insights From 2025's Flood Of Data Breach Litigation

    Author Photo

    Several coherent patterns emerged from 2025's data breach litigation activity, suggesting that judges have grown skilled at distinguishing between companies that were genuinely victimized by sophisticated criminal actors despite reasonable precautions, and those whose security practices invited exploitation, says Frederick Livingston at McDonald Baas.

  • Series

    Fly-Fishing Makes Me A Better Lawyer

    Author Photo

    Much like skilled attorneys, the best anglers prize preparation, presentation and patience while respecting their adversaries — both human and trout, says Rob Braverman at Braverman Greenspun.

  • 4 Ways GCs Can Manage Growing Service Of Process Volume

    Author Photo

    As automation and arbitration increase the volume of legal filings, in-house counsel must build scalable service of process systems that strengthen corporate governance and manage risk in real time, says Paul Mathews at Corporation Service Co.

  • Series

    NY Banking Brief: All The Notable Legal Updates In Q4

    Author Photo

    In the fourth quarter of last year, New York state enacted several developments that affect financial services regulation and business, cementing upcoming compliance obligations including cybersecurity best practices and retail stores' cash management, says Chris Bonner at Barclay Damon.

  • Calif. AI Law Will Have Ripple Effect On Emerging Cos.

    Author Photo

    California's Transparency in Frontier Artificial Intelligence Act is the first comprehensive state-level AI safety framework with mandated public disclosures in the U.S., and although it may not affect emerging companies directly, companies that embed governance and transparency into their operations will differentiate themselves in highly competitive markets, say attorneys at Mintz.

  • Series

    The Law Firm Merger Diaries: Forming Measurable Ties

    Author Photo

    Relationship-building should begin as early as possible in a law firm merger, as intentional pathways to bringing people together drive collaboration, positive client response, engagements and growth, says Amie Colby at Troutman.

  • Opinion

    US Cybersecurity Strategy Must Include Immigration Reform

    Author Photo

    Cyberthreats are escalating while the cybersecurity workforce remains constrained due to a lack of clear standards for national-interest determinations, processing backlogs affecting professionals who protect critical public systems and visa allocations that do not reflect real-world demands, says Rusten Hurd at Colombo & Hurd.

  • OFAC Sanctions Will Intensify Amid Global Tensions In 2026

    Author Photo

    The Office of Foreign Assets Control will ramp up its targeting of companies in the private equity, venture capital, real estate and legal markets in 2026, in keeping with the aggressive foreign policy approach embraced by the Trump administration in 2025, say attorneys at Holland & Knight.

  • 5 E-Discovery Predictions For 2026 And Beyond

    Author Photo

    2026 will likely be shaped by issues ranging from artificial intelligence regulatory turbulence to potential evidence rule changes, and e-discovery professionals will need to understand how to effectively guide the responsible and defensible adoption of emerging tools, while also ensuring effective safeguards, say attorneys at Littler.

  • 2026 State AI Bills That Could Expand Liability, Insurance Risk

    Author Photo

    State bills legislating artificial intelligence that are expected to pass in 2026 will reshape the liability landscape for all companies incorporating AI solutions into their business operations, as any novel private rights of action authorized under AI-related statutes signal expanding exposures, say attorneys at Wiley.

  • Reviewing Historical And Recent NYDFS Blockchain Guidance

    Excerpt from Practical Guidance
    Author Photo

    An industry letter released in the fall by the New York State Department of Financial Services, together with guidance issued over the past decade, signals a heightened regulatory expectation for covered institutions regarding the use of blockchain analytics and requires review, says Nicole De Santis at Nomadis Consulting.

  • SEC Virtu Deal Previews Risks Of Nonpublic Info In AI Models

    Author Photo

    The U.S. Securities and Exchange Commission’s recent settlement with Virtu Financial Inc. over alleged failures to safeguard customer data raises broader questions about how traditional enforcement frameworks may apply when material nonpublic information is embedded into artificial intelligence trading systems, says Braeden Anderson at Gesmer Updegrove.

  • Disney's OpenAI Deal Could Be Turning Point In IP Licensing

    Author Photo

    The Disney-OpenAI agreement last month is less an anomaly than an early attempt to define what licensed generative use of entertainment intellectual property looks like in practice, including how artificial intelligence user-generated content is permitted without eroding ownership and control, says Alex Locke at Meister Seelig.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.