Litigation and legal developments concerning data breaches.
Attorneys at Parker Poe Adams & Bernstein LLP write: Companies facing data breaches are increasingly being judged not only on how they respond to cyberattacks, but also on the security measures they had in place before an incident occurred. Recent federal and state court decisions, including several involving businesses in the Southeast, highlight how failing […]
Attorneys at Saul Ewing LLP write: On September 2, 2026, HB 381 was signed into law and amends Delaware’s data breach notification statute effective immediately. The new Delaware breach law includes a 60-day notice provision to the Delaware Attorney General, narrows the safe harbor for institutions covered by the Gramm-Leach-Bliley Act (GLBA) and entities regulated […]
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according […]
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing security concerns. The ban covers any technology built with the aid of the company’s AI models, and applies to agencies including the Department of the Treasury, the Department of State, and the Department of Justice, […]
HackRead reports on a third arrest within one month linked to the ShinyHunters investigation. Two of the arrests, including this one, have allegedly been connected to the FBI Jobs hack by ShinyHunters. FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs portal breach. A co-founder of […]
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads and sighing in chat rooms. The Register reports: Police suspect a 16-year-old was the main operator of KillSec, a ransomware group linked to around 1,000 suspected attacks worldwide. Authorities announced on Thursday that an international […]
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models escaping their testing environments and interacting with or potentially altering other entities’ systems. Attorney General Rob Bonta’s press release doesn’t reveal exactly what information the investigative demand requires OpenAI to produce. NotebookCheck reports that by […]
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026 New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance outlining the Department’s expectations for DFS-regulated entities’ on conducting risk assessments sufficient to inform their cybersecurity programs. The […]
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. This controversial policy statement purported to apply the FTC’s Health Breach Notification Rule to health apps and connected devices that collect consumer health information. In 2024, however, the Commission updated the Health Breach […]
Many people are waiting today to see what happens in a federal court case involving a young man named Malone Lam. He was part of a group that pulled off a major crypto heist but then bragged about it and left a trail leading right back to them. As ABC News reports: They pulled off […]
