A class action complaint filed in the Northern District of California on October 17, 2025, alleges that entertainment and arcade franchise Dave & Buster’s Entertainment Inc., misled website visitors about users’ ability to reject cookies and tracking technologies. The lawsuit, brought by two California residents, claims that the Dave & Buster’s website continued to place
Legal Services Industry Targeted by BRICKSTORM
By Linn Foster Freedman on
Posted in Cybersecurity
The Mandiant and Google Threat Intelligence Group has been responding to and monitoring malware dubbed BRICKSTORM targeting “a range of industry verticals, most notably legal services, Software as a Service (SaaS) providers, Business Process Outsourcers (BPOs), and Technology.” According to Mandiant/Google, “the value of these targets extends beyond typical espionage missions, potentially providing data…
Condé Nast Faces Setback in California Web Tracking Class Action
By Kathryn Rattigan on
Posted in Data Privacy
A California federal court has refused to dismiss a class action lawsuit alleging that Condé Nast unlawfully installed online trackers on its websites, signaling yet another instance of courts applying a decades-old privacy statute to modern data collection practices.
The lawsuit alleges that when the plaintiff visited Condé Nast-owned publications’ websites such as The New…
Attack Against Salesloft Drift App Includes Google Workspace
By Linn Foster Freedman on
Posted in Cybersecurity
An attack against Salesforce between August 8 and August 18 targeting data through its Salesloft Drift app “is more extensive than at first thought.” The attack targeted numerous Salesforce customers “systematically exfiltrating large volumes of data.”
Google affirmed that threat actors not only targeted the Salesforce integration with Salesloft Drift, but also targeted some Google…
HIPAA Privacy Rule in Focus: OCR Sheds Light on PHI Disclosures and Access Rights
By Roma Patel on
Posted in HIPAA and Health Information
On August 11, 2025, the Office for Civil Rights (OCR) published updated guidance relating to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (Privacy Rule) in the form of two new FAQs. The FAQs clarify the OCR’s position on (1) permitted disclosures of protected health information (PHI) to value-based care arrangements and (2)…
Federal Jury Finds Against Meta for Collecting Data from Flo Health
By Linn Foster Freedman on
Posted in Enforcement + Litigation
On August 1, 2025, a California federal jury found that Meta violated the California Invasion of Privacy Act (CIPA) by collecting data from the Flo Health app without the consent of the individuals who downloaded the app and provided information about their period, ovulation, and pregnancies.
CIPA is California’s wiretap law, and the jury found…
Privacy Tip #454 – Students Sue Kansas School District Over AI Surveillance Tool
By Linn Foster Freedman on
Posted in Privacy Tips
Current and former students at Lawrence High School and Free State High School, located in Lawrence, Kansas, have sued the school district, alleging that its use of an AI surveillance tool violates their privacy.
The allegations revolve around the school district’s use of Gaggle, which is an AI tool that mines the district’s Google…
Federal Court Allows Privacy Related Claims to Proceed in a Proposed Class Action Lawsuit Against Motorola
By Kathryn Rattigan & Guest Contributor on
Posted in Data Privacy
This post was co-authored by Mark Abou Naoum, Summer Associate. Mark is not admitted to practice law.
In December 2024, Jonathan Gabrielli filed several claims alleging that Motorola Mobility LLC (Motorola) misrepresented its data usage policy and shared his personal data with third parties, including Google, Amazon, and TikTok. Specifically, Gabrielli claims that a cookie…
Privacy Tip #452 – Temu + TikTok—Assess Risk Before Downloading
By Linn Foster Freedman on
Posted in Privacy Tips
We have repeatedly warned our readers about the risks associated with TikTok. We are reminding our readers that the popular Temu app raises the same concerns.
The risks have prompted almost two dozen attorneys general to file lawsuits against Temu, alleging that it is “dangerous malware” that secretly monetizes user data in an unauthorized manner.…
Etsy Sued Over Pixel Trackers: What It Means for Your Business
By Kathryn Rattigan on
Posted in Data Privacy
If you’ve ever browsed Etsy looking for a handmade candle or a quirky T-shirt, you might have unknowingly shared more than just your shopping preferences. A new lawsuit filed last week in California claims that Etsy has been quietly allowing third-party companies like Google, Meta, and Microsoft to collect personal data from users through website…