On August 14, 2025, the Department of Justice announced that it unsealed six warrants “authorizing the seizure of over $2.8 million in cryptocurrency, $70,000 in cash, and a luxury vehicle.” According to the press release, “all of the cryptocurrency was seized from a cryptocurrency wallet controlled by Ianis Aleksandrovich Antropenko, who is charged by indictment
Notetaker App in Litigation Crosshairs
On August 15, 2025, notetaker app Otter.ai, Inc. was named a defendant in litigation alleging that its artificial intelligence-powered meeting assistant called Otter Notetaker, which “engages in real-time transcription of Google Meet, Zoom, and Microsoft Teams meetings for Otter accountholders and other users…records, accesses and records the contents of private conversations between Otter accountholders who
FDA Final Guidance on PCCP: Streamlining FDA Approval for AI-Enabled Medical Devices
This post was co-authored by Artificial Intelligence Team member Josh Yoo.
As the federal agency tasked with regulating medical devices, the Food and Drug Administration (FDA) regularly releases guidance to inform medical device manufacturers how to best achieve FDA approval. The topics in these documents often reflect the agency’s proactive approach toward emerging issues
Privacy Tip #457 – Whistleblower Alleges DOGE Copied Social Security Data of 548 Million Americans to Cloud Server
We have previously raised concerns about the Department of Government Efficiency’s (DOGE) access to highly sensitive data, including data at the Social Security Administration, without appropriate security clearances, access controls, and security measures to protect it.
On August 26, 2025, Charles Borges, the chief data officer at the Social Security Administration, filed a whistleblower disclosure
Android VPN Apps Linked to Chinese Co (Qihoo 360) Tied to PRC
Researchers at Arizona State University and Citizen Lab have discovered that three families of Android VPN applications, used by millions of people worldwide, are related and owned by companies or individuals located in mainland China or Hong Kong with ties to the People’s Republic of China.
The researchers analyzed numerous VPN apps and the number
Privacy Tip #456 – Bipartisan Coalition Urges Instagram to Change New Precise Location-Sharing Feature
On August 15, 2025, a bipartisan coalition of 37 state Attorneys General, led by Georgia Attorney General Chris Carr and New Mexico Attorney General Raul Torrez, sent a letter to Instagram requesting that it make “immediate changes to its newly implemented location-sharing feature, which allows a user’s precise location to be displayed on a
Law Enforcement Disrupts BlackSuit (Royal) Gang
In this line of work, I am often asked if law enforcement is ever successful in finding and punishing the threat actors who have wreaked havoc on U.S. businesses and stolen millions of dollars in ransomware attacks. I am so pleased to report that—although few and far between, and very difficult to accomplish—there are wins
Privacy Tip #455 – Match Group Settles with FTC Over Deceptive Advertising
If you are a Match.com user, you will want to be aware that the FTC recently announced that “Match Group, Inc., and Match Group, LLC (Match), the owners and operators of online dating services Match.com, OkCupid, PlentyOfFish, The League, and other dating sites, have agreed to pay $14 million, permanently stop misrepresenting guarantees and locking
CISA Releases Malware Analysis Report for Microsoft SharePoint Vulnerabilities
Threat actors continue to exploit ToolShell to gain unauthorized access to on-premises SharePoint servers. On August 6, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) released a malware analysis report after analyzing six files “including two Dynamic Link-Library (.DLL), one cryptographic key stealer, and three web shells. Cyber threat actors could leverage this malware
Federal Jury Finds Against Meta for Collecting Data from Flo Health
On August 1, 2025, a California federal jury found that Meta violated the California Invasion of Privacy Act (CIPA) by collecting data from the Flo Health app without the consent of the individuals who downloaded the app and provided information about their period, ovulation, and pregnancies.
CIPA is California’s wiretap law, and the jury found