As we reported last week, Stryker was attacked by Iranian-backed hackers in retaliation for Israeli and U.S. strikes against Iran. It was a significant cyberattack, known as a wiper attack. A wiper attack is designed not to extort money from a victim, but instead to send a message and destroy the victim’s data to
litigation
DJI vs. the FCC: What the “Covered List” Could Mean for Drone Operators and Manufacturers
By Kathryn Rattigan on
Posted in Drones
DJI, the world’s leading manufacturer of civilian drones, has escalated its dispute with the Federal Communications Commission (FCC) by filing an appeal in the Ninth Circuit after the FCC placed many DJI products on its “covered list,” which the FCC uses for telecommunications equipment it deems an unacceptable national security risk. DJI says the decision…
Appellate Whiplash in Website Tracking Litigation: VPPA Speeds Ahead While CIPA Still Waits
By Kathryn Rattigan on
Posted in Enforcement + Litigation
Website tracking litigation continues to generate high stakes compliance risk, but not all privacy statutes are moving through the courts at the same pace. A notable divergence is emerging between the Video Privacy Protection Act (VPPA) and the California Invasion of Privacy Act (CIPA). Where the first is rapidly heading toward definitive interpretation by the…
MGM Inks $45M Class Action Settlement for 2019 and 2023 Data Breaches
By Linn Foster Freedman on
Posted in Enforcement + Litigation
MGM Resorts agreed to pay $45 million to settle over a dozen class action lawsuits concerning 2019 and 2023 data breaches. A federal court in Nevada preliminarily approved the settlement, which, according to lawyers, covers over 37 million MGM customers.
The 2019 incident occurred when millions of customers’ names, addresses, telephone numbers, and other personal…
Illinois Biometric Information Privacy Act Amendment May Make Waves in Litigation Trends
By Kathryn Rattigan on
Posted in Data Privacy, Enforcement + Litigation
Last week, Illinois Governor JB Pritzker signed S.B. 2979 to amend the Biometric Information Privacy Act (BIPA) immediately to define the repeated collection of the same biometric data without consent as a SINGLE, COLLECTIVE violation of the Act–this is a significant change. The precedent set by the Illinois Supreme Court in February 2023 in Cothron…
If Your Disclosure of a Data Breach Was “Late,” You May Have to Litigate
By Jean Tomasco on
A professional accounting firm in Illinois received an unwanted holiday “gift” in the form of a class action complaint stemming from its alleged failure to secure personally identifiable information (PII) and to timely notify affected parties of a data breach.
On December 17, 2021, a lawsuit was filed against Bansley & Kierner, LLP, which offers…
Privacy Tip #14 – Record Destruction: an overwhelming problem
By Linn Foster Freedman & Andrea Donovan Napp on
Posted in Privacy Tips
This week’s tip is applicable to both individuals and businesses, and is a headache for both. Lately, it seems that everyone I talk to is lamenting about what a hassle document retention and destruction is, both personally and professionally. For good reason. Like other areas of law (such as data breach notification laws), every state…