Cybersecurity & Privacy

  • September 30, 2026

    Google Looks To Toss 'Implausible' Amended AI Spying Action

    Google is seeking to permanently end the third iteration of a proposed action alleging its "Smart Features" unlawfully give Gemini AI access to users' private correspondence, asserting Google's privacy policy allows it to automatically collect such communication data.

  • September 30, 2026

    Benefits Firm Can't Knock Out Data Breach Suit

    A Georgia federal court on Wednesday narrowed, but refused to dismiss, a proposed class action accusing a human resources services firm of failing to safeguard customer information ahead of a 2024 data breach.

  • September 30, 2026

    Ohio Parents Say Netflix Hooks Kids For Ad Data

    Netflix falsely marketed itself as a "kid-friendly" streaming alternative to Big Tech platforms while secretly building an addictive surveillance machine around children, Ohio parents have claimed in a proposed class action, which is at least the third lawsuit accusing the company of harvesting families' personal data.

  • September 30, 2026

    FCC Opens 2 Spectrum Bands For Satellite Services

    The Federal Communications Commission on Wednesday opened two portions of spectrum totaling more than 1,000 megahertz to expand satellite broadband as part of a long-range plan to free up the airwaves for space-based activities.

  • September 30, 2026

    Tech Co. Sensata Can't Duck Data Breach Class Action

    Sensata Technologies Inc. must face a lawsuit over a cybersecurity breach, a Massachusetts federal judge ruled Wednesday, finding that the industrial sensor technology company's former employees adequately pled that the ransomware attack has exposed them to a risk of identity theft.

  • September 30, 2026

    Paramount Can't Ax Most Claims In Pluto TV Privacy Action

    A California federal judge Tuesday allowed seven claims to proceed in an amended action alleging Paramount Skydance Corp. unlawfully disclosed the personally identifiable information of children who streamed content on its Pluto TV service, finding the parents sufficiently alleged privacy injuries after an earlier dismissal.

  • September 30, 2026

    Mid-Atlantic Law Firm Hit With Data Breach Class Action

    A Virginia woman filed a proposed class action on Tuesday accusing Midkiff Muncie & Ross PC of failing to protect her personal information from a cyberattack that the mid-Atlantic firm says it discovered in December.

  • September 30, 2026

    Insurer Must Cover Part Of Consulting Firm's $7.6M DOJ Deal

    A CNA insurer was required to defend a consulting firm against a False Claims Act suit claiming it allowed New Yorkers' personal information to be compromised while operating a pandemic-era rental assistance portal, and must cover a portion of the firm's $7.6 million settlement, a Virginia federal court ruled.

  • September 30, 2026

    Verano, Dispensary Failed To Protect Patient Info, Suit Says

    An Illinois woman is alleging that nationwide cannabis operator Verano Holdings Corp. and a St. Charles dispensary failed to properly protect patient data, allowing 2.4 million lines of database information to be put on the internet.

  • September 29, 2026

    Social Media Cos., Teens Spar Over Evidence Ahead Of Trials

    Social media companies and teens who allege the companies harmed their mental health sparred in California state court Tuesday over what evidence jurors will hear in an upcoming round of bellwether trials, including whether jurors should hear purported instances of domestic violence in the teens' home lives.

  • September 29, 2026

    Geico Call Class Sunk After Plaintiff Tosses Phone In River

    A Maryland federal judge has refused to certify a class of thousands of insurance claimants who received allegedly unauthorized prerecorded medical appointment reminders from a scheduling vendor retained by Geico, finding that factors such as the plaintiff's decision to throw his cellphone into the Mississippi River made him an inadequate class representative.

  • September 29, 2026

    OpenAI Knew AI Was Rogue Before Hugging Face, Suit Says

    A public interest law nonprofit sued OpenAI in California state court Tuesday, seeking to hold the ChatGPT maker liable for a July cyberattack on Hugging Face, arguing OpenAI "straightforwardly violated California law" by failing to rein in hundreds of rogue AI agents that OpenAI knew were running amok without proper safeguards.

  • September 29, 2026

    7th Circ. Skeptical Of Reviving License Plate Surveillance Suit

    A Seventh Circuit panel seemed skeptical Tuesday that it should revive two Cook County residents' lawsuit claiming the Illinois State Police subject residents to unconstitutional searches through automatic license plate reading cameras whose data is saved for months.

  • September 29, 2026

    DC Circ. Anthropic Ruling Could Chill Contractor Speech

    The D.C. Circuit's decision backing the U.S. Department of Defense's removal of Anthropic from its supply chain was based on a broad reading of the Federal Acquisition Supply Chain Security Act, which could lead contractors to be more careful about publicizing disputes with the department.

  • September 29, 2026

    States' Temporary Aid Data-Sharing Injunction Bid Falls Short

    A D.C. federal judge declined to block a Trump administration policy allowing disclosures of temporary financial assistance recipients' sensitive personal information to federal authorities, saying that while it "seems plausible" this will chill participation in the program, Democratic-led states challenging the policy haven't provided "concrete evidence" of such harm.

  • September 29, 2026

    Ex-U. Of Mich. Coach Says Student's Hacking Suit Falls Short

    Former University of Michigan assistant football coach Matthew Weiss says a civil suit alleging he used his position in the athletic program to access personal photos and videos of thousands of young athletes is time-barred and hinges on expanding cybersecurity laws past precedent.

  • September 29, 2026

    Google Beats Suit Over 'Pig Butchering' App Scams, For Now

    A California federal judge tossed with leave to amend Monday a proposed class action alleging Google falsely advertised its Google Play Store as safe despite allowing swarms of "pig butchering" crypto-scam apps, finding that the claims are barred by Section 230 of the Communications Decency Act.

  • September 29, 2026

    Reed Smith Adds AI, Data And Cyber Partner In Chicago

    Reed Smith LLP announced Tuesday that an attorney specializing in cybersecurity and data privacy matters has moved her practice to the firm's Chicago office after more than two years with Neal Gerber & Eisenberg LLP.

  • September 29, 2026

    Fired Teacher Says AI Tainted Review And Arbitration

    A Massachusetts kindergarten teacher is suing to redo arbitration over her firing, saying the arbitrator who affirmed the school's decision used artificial intelligence to vet her claims that the principal relied on AI to prepare her final, negative performance evaluation.

  • September 29, 2026

    DOJ Puts FCA Target On Health Data Security Lapses

    Government contractors that fail to protect personal health information are on the radar of U.S. Department of Justice officials looking to leverage the False Claims Act, attorneys told attendees at a health law conference in Washington, D.C.

  • September 28, 2026

    Grok-Maker Can't Get Deepfake Suit Paused Or Transferred

    Elon Musk's artificial intelligence company must continue battling a proposed class action brought by women suing over Grok-generated deepfakes of them in sexual situations, a California federal judge ruled Monday, declining to pause or transfer the suit to Texas.

  • September 28, 2026

    Parler Wasn't Worth Much When CEO Was Fired, Jury Told

    A company valuation expert testified Monday in the trial over Parler's 2021 ouster of its CEO that the company had little value at the time and that insider estimates in the hundreds of millions of dollars were "speculation."

  • September 28, 2026

    CyberSec Pro Stole $53M In Uranium Finance Heist, Jury Told

    A prosecutor on Monday told a Manhattan federal jury that a Maryland cybersecurity consultant stole around $53 million in crypto by exploiting software bugs on the decentralized exchange Uranium Finance, while defense counsel argued that the government won't be able to show "whose fingers were on the keyboard."

  • September 28, 2026

    Calif. Governor Vetoes Broad Ban On Sensitive Data Sales

    California's governor has refused to sign off on legislation that would have made the state the latest to restrict the sale and sharing of consumers' geolocation, biometric and other sensitive information, saying the proposed "categorical ban" on these online data practices was "a step too far."

  • September 28, 2026

    CFPB Rips Bid To Ax $43M Debt-Relief Win As 'Frivolous'

    The Consumer Financial Protection Bureau has urged the Seventh Circuit to uphold a more than $43 million enforcement judgment against the former operator of a defunct debt relief provider, defending the agency's lower-court win in a case that has stretched across three presidential terms.

Expert Analysis

  • Drawing A Line Between Settlement Pressure And Extortion

    Author Photo

    U.S. v. Luo, pending in the U.S. District Court for the Southern District of New York, may force courts to address anew when settlement negotiations become criminal extortion, particularly in the age of easily fabricated digital evidence, says attorney Denis Kiely.

  • Colorado's New Chatbot Law May Be Defined By Its Carveouts

    Author Photo

    What makes Colorado's conversational artificial intelligence service law worth close attention is what it leaves out, so a thorough scoping analysis may be as important as compliance planning for companies that develop, license or deploy conversational AI, say attorneys at Eversheds Sutherland.

  • Risk Reduction Lessons For PE Firms From PowerSchool Suit

    Author Photo

    A California federal court's recent orders allowing claims against Bain Capital to proceed based on a data breach at its subsidiary PowerSchool indicate that private equity firms need to strategically approach acquisition activities to avoid cybersecurity risks, say attorneys at Womble Bond.

  • 'Honeypot' Suit Spotlights Nuances Of Trade Secret Law

    Author Photo

    Fintech company MyCard's recent complaint filed in Delaware federal court, alleging that competitor Atomic FI copied its proprietary software, including a "honeypot" in the form of a specific 37-character string, highlights fact-intensive questions of when alleged trade secrets are actually secret, says Eugene Mar at Farella Braun.

  • High Court's FCC Ruling Adds To Comms Industry Paradox

    Author Photo

    The Supreme Court's recent decision in Federal Communications Commission v. AT&T, finding that the FCC's informal forfeiture process survives Seventh Amendment scrutiny, opens some doors for regulated entities, but the practical effect may be surprisingly constrained, says Jonathan Marashlian at The CommLaw Group.

  • A Lender's Guide To Fraud: Identifying Risks

    Author Photo

    The evolving lending landscape, particularly the private credit boom, has heightened lenders' exposure to fraud, but recent bankruptcies demonstrate where fraud risks most commonly materialize and how banks can mitigate exposure at the outset, say attorneys at Moore & Van Allen.

  • Series

    Founding An Autism Academy Made Me A Better Lawyer

    Author Photo

    Starting a nonprofit autism school with no building, no funding model and no guarantee that families would trust us taught me the importance of mission, patience and purpose — lessons that sharpened my practice and showed how meaningful work outside the office can make lawyers better, says Phillip Russell at Ogletree Deakins.

  • HHS Enforcement Restructuring Signals Compliance Risks

    Author Photo

    The U.S. Department of Health and Human Services' recent restructuring of its Office for Civil Rights suggests that, while Health Insurance Portability and Accountability Act enforcement remains central, its priorities have expanded to encompass civil rights, conscience and religious freedom, and data and cybersecurity issues, say attorneys at King & Spalding.

  • Trump's AI Order Is Strategic, Not Merely Deregulatory

    Author Photo

    Although the framework presented in President Donald Trump’s recent executive order on artificial intelligence is styled as voluntary and innovation-friendly, it creates a new soft-power mechanism for bringing the most capable AI systems into closer alignment with federal security priorities, says Jesse Lemon at The Beckage Firm.

  • Opinion

    Rule Of Law Requires Gov't Engagement With Bar, Not Retreat

    Author Photo

    A federal agency's absence from national and local bar conferences, most recently illustrated by the U.S. Department of Justice's withdrawal from a New York City Bar Association white collar conference, disserves the bar, the government lawyers themselves and, ultimately, the administration of justice, says Muhammad Faridi at Linklaters.

  • Fannie, Freddie AI Rules Raise Stakes For Mortgage Lenders

    Author Photo

    Artificial intelligence governance frameworks recently released by Fannie Mae and Freddie Mac impose monitoring and vendor oversight standards on mortgage lenders, potentially reshaping secondary-market eligibility, fair lending reviews and risk management as compliance deadlines approach, says Brendan Palfreyman at Harris Beach.

  • The Paradoxical Duty To Adopt AI When You Can't Bill For It

    Author Photo

    Both billing for hours saved using artificial intelligence and preserving billable time by not adopting AI may violate rules of professional conduct, but until bar associations' ethics rules catch up to this emerging economic dilemma, firms must decide how to adjust fee structures themselves, says Ines Lassalle at Peyrot & Associates.

  • UCC Digital Asset Update Is Altering Lender, Obligor Diligence

    Author Photo

    The rollout of the Uniform Commercial Code's Article 12 is transforming digital asset secured lending, forcing lenders and obligors to rethink diligence, control, custody, monitoring and contract terms, as well as collateral practices and financing structures, as jurisdictions continue to adopt the amendments, say attorneys at Lowenstein Sandler.

  • 3 Misconceptions About Justices' FCC Fines Ruling

    Author Photo

    The U.S. Supreme Court's June 4 Federal Communications Commission v. AT&T decision rejecting AT&T’s and Verizon’s argument that the commission's forfeiture process violates the Seventh Amendment has yielded three common reactions that misunderstand the decision as a matter of law and how the FCC actually operates, says Samuel Feder at Jenner & Block.

  • How FCA, FCPA Risks Are Shifting As Feds Pull Back

    Author Photo

    As the federal government continues its retreat from white collar enforcement, companies should expect False Claims Act risk to grow through private whistleblower suits and Foreign Corrupt Practices Act scrutiny to shift toward foreign prosecutors, requiring more adaptability as accountability becomes less centralized, says Temidayo Aganga-Williams at Selendy Gay.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.