Litigation and legal developments concerning data breaches.
The U.S. Department of Justice announced: A dual Russian and Israeli national was extradited to the United States on charges that he was a developer of the LockBit ransomware group, United States Attorney John Giordano announced. In August, Rostislav Panev, 51, was arrested in Israel pursuant to a U.S. provisional arrest request. Today, Panev was […]
Top Class Actions reports: Mortgage lender loanDepot agreed to a $25 million settlement to resolve claims it failed to prevent a 2024 data breach that compromised the information of 16.9 million customers. The loanDepot settlement benefits individuals who received a data breach notice from loanDepot informing them their information may have been compromised in a data […]
Teiss reports: Harvard Pilgrim Health Care and its parent company, Point32Health, have reached a $16 million settlement to resolve claims arising from a 2023 ransomware attack that compromised the sensitive data of nearly three million individuals. The agreement follows multiple class action lawsuits that were consolidated into a single case in the U.S. District Court […]
The Los Angeles Times reports: A celebrity Beverly Hills plastic surgeon, who has appeared on television shows including “Botched” and “The Doctors,” is being sued by patients who allege that their nude photos were published online after he was hacked — twice — and that he waited months to inform them of the data breaches. […]
Seen at Epstein Becker Green’s Health Law Advisor: New York State appears poised to become the fourth state to explicitly regulate consumer health data not covered by the federal Health Insurance Portability and Accountability Act (HIPAA). In May of 2023, Washington State enacted the My Health My Data Act; in June of 2023, Connecticut amended […]
The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $1,500,000 civil money penalty against Warby Parker, Inc., a manufacturer and online retailer of prescription and non-prescription eyewear, concerning violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule, following the receipt of a breach […]
The HIPAA Journal reports: A District Court Judge has set a March 2025 deadline for Change Healthcare to file motions to dismiss certain claims raised in multiple complaints in response to its February 2024 ransomware attack and data breach. In February 2024, Change Healthcare suffered a ransomware attack that resulted in file encryption and the […]
2023 was a bad year for commercial file transfer software apps because the Clop ransomware gang kept managing to find zero-day vulnerabilities to exploit. One of their campaigns involved Fortra’s GoAnywhere software. Even though Fortra issued a patch for CVE-2023-0669 within a week of discovery, there were many victims, including Brightline. Now TechTarget reports that […]
Courthouse News Service has an update on the Cambridge Analytica settlement. The Ninth Circuit Court of Appeals ruled Thursday afternoon that a federal court did not abuse its discretion in 2023 when it approved a $725 million settlement between Facebook, Inc. — now known as Meta — and a settlement class concerning the Cambridge Analytica scandal, an event in which […]
Privilege Under Pressure: The Shifting Data Breach Investigation Landscape
From the law firm of Greenberg Traurig: Read more about recent federal cases that are posing challenges to claiming attorney-client privilege or work product doctrine at The National Law Review.