Topic
Data Breach
3,438 published works
ComplexDiscovery
Canvas breach moves from disclosure to demand as ShinyHunters sets May 12 deadline
By Rob Robinson
Editor’s Note: ShinyHunters’ Thursday defacement of Canvas login pages and its May 12 leak deadline have moved an education-sector breach from disclosure into demand. The criminal extortion group claims 275…
Data Privacy + Cybersecurity Insider
ShinyHunters Target Medical Device Company Medtronic
Global medical device company Medtronic recently confirmed that it had been attacked by the threat actor group, ShinyHunters. According to Bleeping Computer, Medtronic is “the largest medical device maker in…
Debevoise & Pimpton Data Blog
NYDFS’s First 2026 Cyber Enforcement Action Highlights Imperative of Early Notification, Robust IR Plans and Data Minimization
By Jnskrzypczyk
On April 29, 2026, the New York State Department of Financial Services (“DFS”) issued its first cybersecurity enforcement action of 2026—a Consent Order against Delta Dental Insurance Company and Delta…
Class Action Defense Blog
Georgia Federal Court Holds That To Establish Article III Standing To Sue In Data Breach Class Actions, The Named Plaintiffs’ Injury-In-Fact Requirement Demands Nuanced And Detailed Pleadings
By Gerald L. Maatman, Jr., Rebecca S. Bjork, and Ryan Garippo Duane Morris Takeaways: On April 23, 2026, in Hall v. Bitcoin Depot, Inc., Case No. 25-CV-04317 (N.D. Ga. Apr. 23,…
Substance Law Blog
What To Do If Your Company Has a Data Breach in Canada
By Publisher
Your Obligations After A Data Breach – PIPEDA, RROSH, and Reporting What Constitutes a Data Breach? In Canada, a data breach, often referred to as a “breach of security safeguards,”…
FinTalk
Drift Protocol Exploit: Why “Social Trust” Is the Newest Cybersecurity Gap
By Rajeev Raghavan, Anand Sithian, Sarah Rippy
What You Need to Know Key takeaway #1: Threat actors are no longer just looking for software bugs; they are spending months building fake identities to “befriend” organizations and conduct corporate…
Banking & Financial Services Industry Legal Blog
When Your Vendor Has A Data Breach: Class Action Defense Strategies for Downstream Data Breach Litigation
In modern data breach class actions, the defendant sitting at counsel table is often not the entity that was hacked. It is the business that collected the data and relied…
Data Privacy + Cybersecurity Insider
Privacy Tip #487 – Eurail Notifies 300,000+ Individuals of Data Breach
I have very fond memories of using a Eurail pass back in the day while backpacking through Europe as a student. I was saddened to see that Eurail was the…
ComplexDiscovery
When Your Legal Tech Vendor Gets Breached: DocketWise Incident Exposes 116,666 Immigration Records and a Profession’s Blind Spot
By Rob Robinson
Editor’s Note: A data breach at DocketWise, a widely used immigration case management platform in the United States, has exposed the personal records of 116,666 individuals — including Social Security…
Tech & Sourcing @ Morgan Lewis
Study Finds Average Cost of Data Breaches Decreased Globally in 2025
By Morgan Lewis
In our May 2025 blog post, Study Finds Average Cost of Data Breaches Significantly Increased Globally in 2024 , we highlighted the key findings of the Ponemon Institute’s Cost of…