Legal News
January 15, 2025
1128 views 2 mins 0

Attor­ney Gen­er­al Ken Pax­ton Sues All­state and Ari­ty for Unlaw­ful­ly Col­lect­ing, Using, and Sell­ing Over 45 Mil­lion Amer­i­cans’ Dri­ving Data to Insur­ance Companies

A January 13, 2025 press release from Texas Attorney General Ken Paxton: Texas Attorney General Ken Paxton sued Allstate and its subsidiary, Arity (“Allstate”), for unlawfully collecting, using, and selling data about the location and movement of Texans’ cell phones through secretly embedded software in mobile apps, such as Life360. Allstate and other insurers then […]

Legal News, Data Breach News, Malware Ransomware
January 15, 2025
1007 views 3 mins 0

UK government plans to prohibit government and public sector entities from paying ransomware demands

Governments have routinely urged ransomware victims not to pay ransom demands, as it only encourages them to attack even more victims. Now the UK government may prohibit government and public sector entities from paying. LBC reports: Security minister Dan Jarvis told LBC: “We want these cyber criminals who operate from Russia and elsewhere to look […]

Legal News, Data Breach News
January 10, 2025
1025 views 2 mins 0

PowerSchool Sued Over December Breach of Student, Teacher Data

24 hours. That’s the gap between PowerSchool’s disclosure of a hacking incident affecting teacher and student data and the filing of the first potential class-action lawsuit. Bloomberg Law reports on three potential class-action lawsuits that were filed on January 8th and 9th against the provider of cloud-based education software for K-12 schools: The complaints bring […]

Legal News
December 18, 2024
516 views 12 secs 0

CISA orders federal agencies to secure Microsoft cloud systems after ‘recent’ intrusions

For a while, it was just a recommendation. Now it’s mandatory. Federal civilian agencies were ordered to secure their Microsoft cloud systems after several recent cyber incidents.  The Cybersecurity and Infrastructure Security Agency (CISA) issued a binding directive on Tuesday giving federal agencies a series of deadlines to identify cloud systems, implement assessment tools and abide by […]

Legal News, Cyberattack, News
December 17, 2024
1182 views 3 mins 0

SEC Charges Flagstar for Misleading Investors About Cyber Breach

ADMINISTRATIVE PROCEEDINGFile No. 3-22360 December 16, 2024 – The Securities and Exchange Commission today filed settled charges against Flagstar Bancorp, Inc. (now known as “Flagstar Financial, Inc.”), for making materially misleading statements regarding a cybersecurity attack on Flagstar’s network in late 2021 (the “Citrix Breach”). The SEC’s order finds that Flagstar negligently made materially misleading statements […]