On October 19, 2026, a federal district court judge allowed ordinary negligence and implied-contract claims to proceed in a proposed class action against Kaplan North America. See Linsell v. Kaplan N. Am., LLC, No. 0:26-cv-60785-WPD, slip op. (S.D. Fla. Oct. 19, 2026). The plaintiffs all sought Kaplan’s test-preparation, professional-licensing, or educational services. The case…

On October 8, 2026, a federal judge in Pennsylvania allowed most claims in a student data-breach lawsuit against Fireworks Software, Inc. to proceed, while dismissing a New Jersey consumer-fraud claim. Adamek v. Fireworks Software, Inc., No. 2:24-cv-05185-NIQA, slip op. at 4–15 (E.D. Pa. Oct. 8, 2026), is a class action litigation following a 2024…

Global medical device company Medtronic recently confirmed that it had been attacked by the threat actor group, ShinyHunters. According to Bleeping Computer, Medtronic is “the largest medical device maker in the world by revenue ($33.5 billion) and also develops healthcare technologies and therapies.”

ShinyHunters alleges that it has stolen over nine million Medtronic records…

On January 1, 2026, broad new privacy laws will take effect in Kentucky, Indiana, and Rhode Island, granting consumers in those states greater control over their personal data. With these additions, 19 states now have comprehensive privacy laws in place, which is a significant shift in the data privacy landscape since California led the way in 2018 with the…

700Credit, a Michigan-based company that runs credit checks and identification verification services for automobile dealerships nationwide, has announced that an “integrated partner” was compromised, allowing a bad actor to obtain unauthorized access to its network of information about individuals whose credit the company checked. The incident was discovered on October 25, 2025.

Michigan officials confirmed…

A recent federal court decision in Adam v. CaringBridge, Inc., No.  25-cv-06042-WHO, 2025 WL 3493565 (N. Cal. Dec. 5, 2025), offers a cautionary tale for plaintiffs in privacy class actions, and a strategic playbook for defendants. Even where a case is properly filed in California (the home turf for many privacy statutes and plaintiffs)…

Malwarebytes recently reported that it has found scammers hijacking websites of name brands, including banks, software companies, and social media platforms to trick victims into calling a fraudulent telephone number instead of a 24/7 support line.

According to Malwarebytes:

Here’s how it works: Cybercriminals pay for a sponsored ad on Google pretending to be a…