Litigation and legal developments concerning data breaches.
BeInsure reports that the attorneys general of New York, Connecticut, Michigan and New Jersey have reached a $10 million settlement with five Perry Johnson companies over a 2023 data breach that exposed personal and medical information belonging to more than 13.3 million people. The agreement also requires extensive changes to information security, incident response, access […]
The Korea Herald reports: A South Korean court on Thursday shot down Coupang’s request for a stay of execution for the 423.58 billion won ($315.72 million) penalty surcharge imposed for a massive data breach last year. The Seoul Administrative Court partially accepted the e-commerce giant’s request to suspend measures levied by the Personal Information Protection […]
Attorneys at Parker Poe Adams & Bernstein LLP write: Companies facing data breaches are increasingly being judged not only on how they respond to cyberattacks, but also on the security measures they had in place before an incident occurred. Recent federal and state court decisions, including several involving businesses in the Southeast, highlight how failing […]
Attorneys at Saul Ewing LLP write: On September 2, 2026, HB 381 was signed into law and amends Delaware’s data breach notification statute effective immediately. The new Delaware breach law includes a 60-day notice provision to the Delaware Attorney General, narrows the safe harbor for institutions covered by the Gramm-Leach-Bliley Act (GLBA) and entities regulated […]
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according […]
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing security concerns. The ban covers any technology built with the aid of the company’s AI models, and applies to agencies including the Department of the Treasury, the Department of State, and the Department of Justice, […]
HackRead reports on a third arrest within one month linked to the ShinyHunters investigation. Two of the arrests, including this one, have allegedly been connected to the FBI Jobs hack by ShinyHunters. FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs portal breach. A co-founder of […]
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads and sighing in chat rooms. The Register reports: Police suspect a 16-year-old was the main operator of KillSec, a ransomware group linked to around 1,000 suspected attacks worldwide. Authorities announced on Thursday that an international […]
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models escaping their testing environments and interacting with or potentially altering other entities’ systems. Attorney General Rob Bonta’s press release doesn’t reveal exactly what information the investigative demand requires OpenAI to produce. NotebookCheck reports that by […]
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026 New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance outlining the Department’s expectations for DFS-regulated entities’ on conducting risk assessments sufficient to inform their cybersecurity programs. The […]
