The FBI and the Internet Crime Complaint Center (IC3) has issued a public service announcement warning the public about a surge in malicious spoofed websites related to the FIFA games. Cybercriminals are using these fake sites to impersonate FIFA, tricking fans into giving up personal information, credit card numbers, or buying counterfeit tickets and fake
cyber-attacks
Five Eyes Issue “Call to Action” to Protect Against AI Cyber Threats
By Linn Foster Freedman on
Posted in Artificial Intelligence
The leaders of the Five Eyes cyber security agencies, representing Australia, New Zealand, Canada, the United Kingdom, and the United States, issued an alert on June 22, 2026, entitled “The AI Shift in Cyber Risk: Why Leaders Must Act Now” urging organizations to a “call to action” to protect against cyber threats both for organizations…
Privacy Tip #486 – “Stolen Credentials Are a Major Threat”
By Linn Foster Freedman on
Posted in Privacy Tips
According to Security Week’s recent article, “Stolen Logins Are Fueling Everything from Ransomware to Nation-State Cyberattacks,” cybersecurity firm Ontinue’s 2H 2025 Threat Intelligence Report, showcases that “Attackers aren’t breaking in anymore, they’re logging in.”
According to Ontinue’s Report, in the second half of 2025, “identity became the primary attack surface.” This means…
Adobe Issues Patches for ColdFusion “High Severity” Vulnerability
By Linn Foster Freedman on
Posted in Cybersecurity
Adobe recently issued a patch for a high-severity vulnerability for ColdFusion versions 2023.11 and 2021.17 and earlier; according to the National Institute of Standards and Technology (NIST), “an attacker could exploit this vulnerability to access files or directories that are outside of the restricted directory set by the application. This could lead to the disclosure…
American Addiction Centers Hit with PHI Breach Class Action
By Kathryn Rattigan on
Posted in Enforcement + Litigation
American Addiction Centers Inc. faces a class action in the Middle District of Tennessee for allegations that it violated the Health Insurance Portability and Accountability Act (HIPAA) by failing to protect patient data from cyber criminals.
In September 2024, American Addiction Centers suffered a cyber-attack that led to the unauthorized access to sensitive personal information…
FERC Seeks to Tighten Cyber Security for Electric Grid Cyber Systems
By Robinson+Cole's Data Privacy + Cybersecurity Team on
Posted in Enforcement + Litigation
The Federal Energy Regulatory Commission (FERC) is tasked with keeping our electric grid safe and maintaining reliable and secure energy for U.S. consumers. On January 20, FERC issued a Notice of Proposed Rulemaking (NOPR) that proposes to strengthen its Critical Infrastructure Protection Reliability Standards by requiring internal network security monitoring for high and medium impact…
GAO Report Identifies Need for DOE to Address Risks to Electrical Distribution System
By Linn Foster Freedman on
Posted in Cybersecurity
The United States Government Accountability Office (GAO) recently completed and published a study on electricity grid cybersecurity that concluded that the Department of Energy (DOE) needs to ensure its plans fully address risks to electricity distribution systems.
The GAO completed two prior studies of the generation and transmission functions of the electricity grid and found…
The Effect of a Biden-Harris Presidency on Privacy in the U.S.
By Kathryn Rattigan on
Posted in Data Privacy
How will a Biden-Harris presidency affect the U.S. privacy landscape? Let’s take a look.
Federal Privacy Legislation
On both sides of the political aisle there have been draft proposals in the last 18 months on federal privacy legislation. In September, movement actually happened on federal privacy legislation with the U.S. Setting an American Framework to…
Sammamish, Washington Declares Emergency After Ransomware Attack
By Linn Foster Freedman on
Posted in Cybersecurity
I was a speaker at a recent conference of municipalities in a state last week, and during my presentation, I mentioned the various cyber-attacks that have affected cities, towns and educational departments in the U.S. (Atlanta, GA; Farmington, CT; West Haven, CT; Leeds, AL; Yarrow Point, WA; and Leominster, MA to name a few). Little…
California Law IoT Devised to Have “Reasonable Security Feature”
By Guest Contributor on
Posted in Internet of Things
On September 28, 2018, California passed Senate Bill No. 327, Chapter 886, which regulates the security of all internet of things (IoT) devices sold in California. Collectively, IoT broadly refers to all internet-enabled devices and includes everything from doorbells and lamps to cell phones and wearable devices. This bill, beginning on January 1, 2020, will…