The U.S. District Court for the Northern District of California dismissed a consumer class action against Ledger SAS’s e-commerce vendor Shopify Inc. because of its locale – Shopify is headquartered in Ottawa, Canada. Judge Edward M. Chen said in his decision earlier this week that the plaintiffs failed to satisfy their burden to demonstrate that
Hackers
Phishing, Vishing, and Smishing—Your Employees Need to Know the Newest Schemes
By Linn Foster Freedman on
Posted in New + Now
New dictionary words have been formed to describe online scams. Phishing, one that everyone knows by now, is when a scammer uses a pretext in an email to get someone to click on a link or attachment in the email to deploy malicious malware and ransomware.
Social engineering is when criminals conduct online search of…
Colonial Pays Millions in Ransomware Attack on Pipeline
By Kathleen Porter on
Posted in Cybersecurity
Colonial Pipeline paid hackers a ransom of $4.4 million in bitcoin soon after discovering a cybersecurity hack on its systems that began on May 6. The company’s acknowledgement comes after days of speculation about whether a ransom was paid to the hackers. The company’s CEO defended the “difficult” decision to pay the ransom, maintaining he…
Microsoft Releases Additional Resources for Exchange Flaws and CISA Issues Alert
By Linn Foster Freedman on
Posted in Cybersecurity
As we alerted our readers last week, Microsoft announced that its Exchange email servers have been compromised, which is estimated to affect at least 30,000 companies based in the United States. It is reported that the hackers installed web shells (and sometimes multiple web shells) into Microsoft’s customers’ email servers, giving the hackers back doors…
Another Cybersecurity Firm Hit with Attack by “Highly Sophisticated” Hackers
By Linn Foster Freedman on
Posted in Cybersecurity, New + Now
Cybersecurity firm SonicWall Inc. is investigating an attack on its internal systems that it describes as “highly sophisticated.” According to SonicWall, the investigation is centered around its Secure Mobile Access 100 series, which assists with end-to-end secure remote access.
The company said that a few thousand devices have been impacted and that it is trying…
Marriott Wins CCPA Data Breach Lawsuit
By Robinson+Cole's Data Privacy + Cybersecurity Team on
Marriott recently won dismissal of a proposed class action data breach lawsuit alleging several violations, including a violation of the California Consumer Privacy Act (CCPA). The case, Arifur Rahman v. Marriott International, Inc. et al., Case No.: 8:20-cv-00654, was dismissed in an Order by U.S. District Court Judge David O. Carter on January 12, 2021.…
Privacy Tip #268 – Changing Your Router Password
By Linn Foster Freedman on
Posted in Privacy Tips
Following Ubiquiti’s security incident and its subsequent recommendation to change your router password and enable multi-factor authentication, and the fact that it is widely reported that using default passwords on routers while working from home is a security risk, we thought it would be helpful to remind you to change your router password sooner rather…
Cyber Intelligence Facility in Port of Los Angeles to Thwart Maritime Threats
By Kathryn Rattigan on
Posted in Cybersecurity
The maritime industry is an enticing target for hackers. The Port of Los Angeles (the Port) alone facilitated about $276 billion in trade last year, and the International Chamber of Shipping estimated that the total value of world shipping was around $14 trillion in 2019. The Port has plans to construct a multi-million-dollar cyber intelligence…
Proposed New Breach Notification Rule for the Banking Industry
By Robinson+Cole's Data Privacy + Cybersecurity Team on
Posted in Enforcement + Litigation
The Office of the Comptroller of the Currency, Treasury (OCC), the Board of Governors of the Federal Reserve System (Board), and the Federal Deposit Insurance Corporation (FDIC) recently announced a “Notice of Proposed Rulemaking for the Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers.” This new rule would require a banking…
Home Depot Settles Data Breach Multi-state Enforcement Action for $17.5 Million
By Linn Foster Freedman on
Posted in Enforcement + Litigation
Home Depot has agreed to settle a multi-state enforcement action by 46 U.S. states and Washington, D.C. arising from the data breach that occurred in 2014. Home Depot has agreed to pay $17.5 million to put the enforcement action behind it. The investigation was led by the Attorneys General of Connecticut, Illinois and Texas.
The…