Litigation and legal developments concerning data breaches.
HackRead reports on a third arrest within one month linked to the ShinyHunters investigation. Two of the arrests, including this one, have allegedly been connected to the FBI Jobs hack by ShinyHunters. FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs portal breach. A co-founder of […]
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads and sighing in chat rooms. The Register reports: Police suspect a 16-year-old was the main operator of KillSec, a ransomware group linked to around 1,000 suspected attacks worldwide. Authorities announced on Thursday that an international […]
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models escaping their testing environments and interacting with or potentially altering other entities’ systems. Attorney General Rob Bonta’s press release doesn’t reveal exactly what information the investigative demand requires OpenAI to produce. NotebookCheck reports that by […]
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026 New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance outlining the Department’s expectations for DFS-regulated entities’ on conducting risk assessments sufficient to inform their cybersecurity programs. The […]
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. This controversial policy statement purported to apply the FTC’s Health Breach Notification Rule to health apps and connected devices that collect consumer health information. In 2024, however, the Commission updated the Health Breach […]
Many people are waiting today to see what happens in a federal court case involving a young man named Malone Lam. He was part of a group that pulled off a major crypto heist but then bragged about it and left a trail leading right back to them. As ABC News reports: They pulled off […]
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million to settle a proposed class action lawsuit arising from a data breach that affected approximately 2.7 million people last year. Once the preliminary settlement is approved, DaVita will pay out claims associated with the breach, according to […]
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12 states and Ontario, Canada: Thomson Reuters says an unauthorised party got into files belonging to C-Track, the case management platform its court software business sells to judiciaries. The records involved come from appellate courts in […]
Montana Attorney General Austin Knudsen and 15 other state attorneys general launched an investigation into OpenAI over potential violations of consumer protection and data-privacy laws following a data breach by one of the company’s experimental models this summer. In July, OpenAI released an experimental artificial intelligence model without proper safeguards that hacked into several computer […]
A reminder that the details of states’ data breach notification laws really do matter. A notification that may be satisfactory in most states may be noncompliant in another state and really cost the firm. From attorneys at BakerHostetler: One ruling is not a trend. And there can be unique factors at play in regulatory investigations […]
