New York State Department of Financial Services Issues Guidance on Cybersecurity, Sanctions, and Virtual Currency Following Escalation of Iran Conflict
From Covington and Burling: Read more at Inside Privacy.
Texas Enacts Liability Shield From Punitive Damages for Certain Small Businesses That Adopt Cybersecurity Programs
From attorneys at Jackson Lewis: On June 20, 2025, Texas Governor Greg Abbott signed SB 2610 into law, joining a growing number of states that aim to incentivize sound cybersecurity practices through legislative safe harbors. Modeled on laws in states like Ohio and Utah, the new Texas statute provides that certain businesses that “demonstrate[] that at the time […]
State Data Breach Notification Laws – June 2025
Foley & Lardner has updated a resource on state laws. From their website:
Marriott wins appeal to block class action over data breach
The Daily Record reports an appellate decision that is probably quite a relief to Marriott International: The U.S. Court of Appeals for the 4th Circuit has reversed a lower Maryland court’s recertification of plaintiff classes in a pair of consolidated lawsuits filed against Marriott and an information technology service provider for a 2018 data breach, handing down a major […]
I Joined Every Class Action Lawsuit I Could Find, and So Can You
Is this becoming a growing trend with more people signing up for every class action lawsuit they might be eligible for? How much money can you get this way? WIRED reports: In early April of this year, after more than a decade of litigation and a $90-million settlement, Mark Zuckerberg sent me forty bucks on Venmo. […]
PowerSchool hacker pleads guilty, released on personal recognizance bond
DataBreaches.net reports: He’s just a frail-looking teenager, but he sent threatening emails to get his victims to pay his extortion demands. Today, 19 year-old Assumption College student Matthew Lane waived indictment and pleaded guilty in a Worcester courtroom to hacking an unnamed telecom company and an unnamed edtech vendor, widely known to be PowerSchool. As per the plea […]
Oklahoma Expands its Security Breach Notification Law
From Jackson Lewis’s Workplace Privacy, Data Management & Security Report: The Oklahoma State Legislature recently enacted Senate Bill 626, amending its Security Breach Notification Act, effective January 1, 2026, to address gaps in the state’s current cybersecurity framework (the “Amendment”). … In the new year, entities required to provide notice to impacted individuals under the […]
Germany fines Vodafone $51 million for privacy, security breaches
Vodafone GmbH has been hit with a massive fine by the German data protection agency for privacy and data security violations. BleepingComputer reports: The German data protection authority (BfDI) has fined Vodafone GmbH, the telecommunications company’s German subsidiary, €45 million ($51.4 million) for privacy and security violations. “Due to malicious employees in partner agencies who […]
Two Men Sentenced to Prison for Aggravated Identity Theft and Computer Hacking Crimes
A press release from the U.S. Attorney’s Office, Eastern District of New York:
California Court Holds Defendants Liable for Fraudulent Wire Transfer
If a firm falls for a business email compromise or fraud and wires payment to a fraudster, it will still have to pay the correct party. From the Proskauer law firm, a post about a recent case: A case of first impression decided by the California Court of Appeal, Fourth Appellate District demonstrates the high […]