Cybersecurity & Privacy

  • December 22, 2025

    Ex-UMich Coach Can't Shake ID Theft Charges

    A former University of Michigan assistant football coach will face aggravated identity theft charges after a federal judge ruled Monday that the use of stolen passwords is "central" to the broader allegations of accessing thousands of students' intimate photographs.

  • December 22, 2025

    OPM Must Face DOGE Data Access Suit

    A New York federal judge has denied the U.S. Office of Personnel Management's bid to end a lawsuit claiming it unlawfully gave employment records to President Donald Trump's Department of Government Efficiency, saying its assertion that the alleged privacy law violation "effects" have been "eradicated" is unsupported by the record.

  • December 22, 2025

    Robocall Class Seeks $35.7M After Failed Deal Talks

    Consumers looking to hold a resort company liable after its vendor placed more than 70,000 unwanted marketing calls to National Do Not Call registrants have asked an Illinois federal judge to enter a $35.7 million judgment reflecting their recent summary judgment win after their court-ordered settlement negotiations were unsuccessful.

  • December 22, 2025

    Fulton County Must Face State's 2020 Election Subpoenas

    The election board of Fulton County, Georgia, was ordered to hand over documents from the 2020 presidential election to its state counterpart by a state judge who said that while the subpoenas might seem "stale and ill-timed," they remained enforceable.

  • December 22, 2025

    Feds Snatch $8.5M In Crypto Connected To Investment Scam

    Federal prosecutors have seized $8.5 million in the cryptocurrency Tether that investigators say belongs to victims who were allegedly lured into investing in bogus cryptocurrency trading schemes, the U.S. Attorney's Office for the Eastern District of North Carolina said.

  • December 22, 2025

    Life Insurer, Customers' $335K Deal OK'd In Data Breach Suit

    A Connecticut federal court gave final approval to a deal requiring a life insurance and financial planning company to pay $335,000 to end claims over a 2023 data breach that potentially compromised its customers' personal information.

  • December 19, 2025

    The Data Privacy And AI Developments That Shaped 2025

    The past year delivered a pair of major jury verdicts against Meta and Google in two of the first data privacy cases to head to trial, while a controversial effort quickly materialized and gained steam at the federal level to block states from regulating emerging artificial intelligence technologies. 

  • December 19, 2025

    Google Says SerpApi Bypasses Security To Scrape IP

    Google says data-scraping firm SerpApi circumvents its security measures protecting copyrighted content that appears in search results, alleging in a California federal lawsuit Friday that SerpApi steals content Google licenses from others "at an astonishing scale" and then resells it to its own customers.

  • December 19, 2025

    AI Note-Taking Software Stores Voice Data, Ill. Suit Says

    Artificial intelligence software that provides transcription and other meeting assistance on platforms such as Zoom and Microsoft Teams illegally collects, stores and uses individuals' biometric voice data without their informed consent, according to a lawsuit filed in Illinois federal court.

  • December 19, 2025

    F5 Faces Securities Class Action Over 'False' Security Claims

    Seattle tech company F5 Inc. boasted to investors about its cybersecurity offerings while at the same time hiding a long-term data breach that targeted the company's highest-revenue product, an investor claimed Friday in a proposed class action filed in Washington federal court.

  • December 19, 2025

    23 AGs Oppose FCC's Possible AI Law Preemption

    Nearly two dozen state attorneys general joined forces to urge the Federal Communications Commission not to issue a ruling that would preempt state-level regulation of artificial intelligence technologies, arguing in a comment letter that the agency lacks such authority.

  • December 19, 2025

    Cadence Bank Seeks 1st Nod For $5.25M Data Breach Deal

    Cadence Bank has reached a $5.25 million deal to end negligence claims it faced in multidistrict litigation over the May 2023 breach of file transfer application MOVEit, a consumer affected by the breach has informed a Boston federal judge.

  • December 19, 2025

    BigLaw And Boutiques Both Shine In 2025's Top 10 Deals

    A tight circle of elite law firms guided the way as megadeals roared back with force in 2025, while a small group of specialist and international firms also made their mark across global transactions spanning infrastructure, gaming, pharmaceuticals, artificial intelligence and energy.

  • December 19, 2025

    9th Circ. Takes Up IPhone Buyers' Class Decertification

    The Ninth Circuit has summarily agreed to let consumers appeal what they had described as the "death knell" district court ruling that decertified their class of iPhone users that was expected to reach 200 million members in an antitrust case over Apple's App Store policies.

  • December 19, 2025

    The 6 Biggest Rulings By Massachusetts' Top Court In 2025

    Massachusetts' top court rejected a novel double jeopardy claim in a headline-grabbing murder case, revived claims against Harvard over a "ghoulish" scheme, and said a Snapchat Bitmoji could show police bias, among other significant rulings this year.

  • December 18, 2025

    Hisense Blocked From Collecting Texan TV Viewers' Data

    A Texas state court temporarily blocked Chinese television maker Hisense from collecting viewers' personal data as the Lone Star State's attorney general sues the manufacturer and four other companies for allegedly "spying" on what consumers are watching, the attorney general has announced.

  • December 18, 2025

    Amazon Can't Shed Class Status In Virtual Try-On Privacy Suit

    A Seventh Circuit panel has affirmed an Illinois district judge's certification of a class of more than 100,000 Amazon shoppers who accuse the e-commerce giant of illegally collecting and preserving their facial geometry data when they used the company's virtual try-on feature to preview products such as makeup and eyewear.

  • December 18, 2025

    OCC Ends Citi Risk Management Resource Review Order

    The Office of the Comptroller of the Currency on Thursday formally ended a 2024 amendment to a previous consent order against Citibank over its risk management practices, with Citibank saying the relevant remediation programs are "nearly at target-state."

  • December 18, 2025

    Arkansas Social Media Safety Law Temporarily Blocked

    Arkansas cannot enforce a state law that bans social media platforms from using algorithms that could cause a user to kill themselves, buy drugs, become addicted to social media or develop an eating disorder, a federal district judge has ruled.

  • December 18, 2025

    FCC Reworks Reg Framework For Low Power TV

    The Federal Communications Commission on Thursday created a new regulatory framework in hopes of advancing the low-power TV industry.

  • December 18, 2025

    Cigna Faces Class Claims Over Vendor Data Breach

    A Cigna customer has filed a proposed class action in Connecticut federal court that blames the insurer for a data breach that affected a support services vendor between October 2024 and January 2025, leading to the data appearing online and leaving customers at risk of identity theft.

  • December 18, 2025

    Pa. Casino Accused Of Ignoring Data-Tracking Opt-Out

    A proposed class action claims the Rivers Casino in Pittsburgh surreptitiously recorded website visitors' browsing and shared it with third parties, including Facebook and Spotify, even if the users chose to "reject" tracking codes, according to the complaint filed in Pennsylvania state court Wednesday.

  • December 18, 2025

    LinkedIn Data Access Settlement Rejected In Antitrust Case

    A California federal court refused to approve a settlement requiring LinkedIn to stop conditioning access to its data interface on rivals agreeing not to use the data for a competing professional social network, a deal that included no damages but up to $4 million in attorney fees.

  • December 18, 2025

    Car Dealer Credit Check Co. Sued Over Breach Affecting 5.8M

    A company that handles credit inquiries for car dealerships is facing a proposed class action accusing it of negligence, following a cyberattack on its systems in October that compromised the personal information of more than 5.8 million people.

  • December 17, 2025

    Late Plaintiff Substitutions Sink Hospital Health Data Suit

    A Pennsylvania federal judge has dismissed a proposed data breach class action against Thomas Jefferson University Hospitals Inc. over the named plaintiffs purported inability to serve as leaders of the suit, ruling that they had two years to find substitutes.

Expert Analysis

  • Cybersecurity Risks Can Lurk In Gov't Contractor Acquisitions

    Author Photo

    The Justice Department’s recent False Claims Act enforcement activity against Raytheon and Nightwing-related defense contractors demonstrates the importance of identifying and mitigating potential cybersecurity compliance risks when acquiring a company that contracts with the federal government, say attorneys at Foley & Lardner.

  • Associates Can Earn Credibility By Investing In Relationships

    Author Photo

    As the class of 2025 prepares to join law firms this fall, new associates must adapt to office dynamics and establish credible reputations — which require quiet, consistent relationship-building skills as much as legal acumen, says Kyle Forges at Bast Amron.

  • New Colo. Teen Privacy Rules Signal National Regulatory Shift

    Author Photo

    Recently released proposed rule amendments to the Colorado Privacy Act that would create some of the most robust protections for minors' online data in the U.S. reflect an ongoing trend of states taking steps to extend privacy protection for their residents, complicating the compliance burden for companies, say attorneys at Morgan Lewis.

  • A Look At New Calif. Cybersecurity, Risk Assessment Rules

    Author Photo

    The California Privacy Protection Agency Board recently finalized regulations related to automated decision-making technology, cybersecurity audits and risk assessments that establish additional requirements on businesses operating in California, and although these new rules are less onerous than some of the draft rules, compliance may still require substantial planning and updates, say attorneys at Morgan Lewis.

  • Lessons From 7th Circ.'s Deleted Chat Sanctions Ruling

    Author Photo

    The Seventh Circuit’s recent decision in Pable v. Chicago Transit Authority, affirming the dismissal of an ex-employee’s retaliation claims, highlights the importance of properly handling the preservation of ephemeral messages and clarifies key sanctions issues, says Philip Favro at Favro Law.

  • Divest Order Shows How Security Fears Extend CFIUS Scope

    Author Photo

    A recent White House order forcing a Chinese company to divest its 2020 acquisition of a U.S. audiovisual supplier demonstrates the Committee on Foreign Investment in the United States’ growing power to sink foreign transactions over national security concerns — and the enormous risks to U.S. companies from such reviews, say attorneys at Bass Berry.

  • Series

    Quilting Makes Me A Better Lawyer

    Author Photo

    Turning intricate patterns of fabric and thread into quilts has taught me that craftsmanship, creative problem-solving and dedication to incremental progress are essential to creating something lasting that will help another person — just like in law, says Veronica McMillan at Kramon & Graham.

  • Lessons Learned 3 Years After First CCPA Enforcement Action

    Author Photo

    Three years after the first public enforcement action under the California Consumer Privacy Act, Attorney General Rob Bonta has pursued a steady stream of enforcement actions across industries, providing a clearer picture of how the law is being interpreted and enforced, says Tatum Andres at Kilpatrick.

  • 2 Appellate Rulings Offer Clickwrap Enforcement Road Map

    Author Photo

    Two recent decisions from the Fourth and Eleventh Circuits in cases involving Experian signal that federal appellate courts are recognizing clickwrap agreements' power in spite of their simplicity, and offer practical advice on how companies can sufficiently demonstrate notice and assent when attempting to enforce contractual terms, says Brian Willett at Saul Ewing.

  • What 2 Profs Noticed As Transactional Law Students Used AI

    Author Photo

    After a semester using generative artificial intelligence tools with students in an entrepreneurship law clinic, we came away with numerous observations about the opportunities and challenges such tools present to new transactional lawyers, say professors at Cornell Law School.

  • Crypto Custody Guidelines Buoy Both Banks And Funds

    Author Photo

    A statement released last month by banking regulators — highlighting risks that the agencies expect banks holding crypto-assets to mitigate — may encourage more traditional institutions to offer crypto-asset safekeeping and thereby offer asset managers more options for qualified custodians to custody crypto-assets for their clients, say attorneys at Dechert.

  • Top Takeaways From Trump's AI Action Plan

    Author Photo

    President Donald Trump's AI Action Plan represents some notable evolution in U.S. policy, including affirmation of the administration's trend toward prioritizing artificial intelligence innovation over guardrails and toward supporting greater U.S. private sector reach overseas, say attorneys at WilmerHale.

  • Reel Justice: 'Eddington' Spotlights Social Media Evidence

    Author Photo

    In the neo-Western black comedy “Eddington” released last month, social media is a character unto itself, highlighting how the boundaries between digital and real-world conduct can become blurred, thereby posing evidentiary challenges in criminal prosecutions, says Veronica Finkelstein at Wilmington University School of Law.

  • Rebuttal

    BigLaw Settlements Should Not Spur Ethics Deregulation

    Author Photo

    A recent Law360 op-ed argued that loosening law firm funding restrictions would make BigLaw firms less inclined to settle with the Trump administration, but deregulating legal financing ethics may well prove to be not merely ineffective, but counterproductive, says Laurel Kilgour at the American Economic Liberties Project.

  • 9th Circ. Leaves Scope Of CIPA Applicability Unclear

    Author Photo

    Three recent Ninth Circuit decisions declined to directly address whether all of the California Invasion of Privacy Act's provisions actually apply to internet activity, and given this uncertainty, companies should heed five recommendations when seeking to minimize CIPA litigation risk, say attorneys at Skadden.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.