Jason C. Gavejian and Maya Atrakchi of Jackson Lewis write: The U.S. Supreme Court recently granted a petition for review of a data breach lawsuit addressing the issue of whether parties can pursue a class arbitration when the language in the arbitration agreement does not explicitly allow for such, Lamps Plus, Inc. v. Varela , No. 17-988,…
Category: Commentaries and Analyses
France: New “Data Security Kit” Published by the ANSSI
Denise Lebeau-Marianna and Caroline Chancé of DLA Piper write: …. In order to help organizations perform secure personal data processing and improve the overall digital security in France, the ANSSI has made available on its website (in French), a practical tool supplementing the French data protection supervisory authority’s (CNIL) own guidelines and recommendations on how…
UK: Grant West, aka “Courvoisier,” sentenced to 10 years and eight months
A prolific computer hacker has been jailed for 10 years and eight months for stealing financial data and passwords belonging to tens of thousands of people in order to sell the information on the dark web. Grant West, 26, sent “phishing” emails, designed to look as if they came from legitimate businesses, to target customers…
Aetna, still looking for scapegoat in HIV disclosure fiasco, sues plaintiffs firms
This case is the stuff derisive tweeters live for. Seriously. Aetna is only making itself look worse and worse. Alison Frankel reports: Aetna has intensified its search for someone else to blame for a settlement notification fiasco that has so far put the company on the hook for nearly $20 million. Aetna stands accused, as…
MN: Associates in Psychiatry and Psychology disclose ransomware incident
Associates in Psychiatry and Psychology in Minnesota have notified 6,546 patients and HHS of a ransomware incident that occurred in March. Some time overnight between March 30 and March 31st, the practice’s files were locked up with TripleM ransomware. The ransomware not only locked up the data files, but according to their notification and FAQ…
New VPNFilter malware targets at least 500K networking devices worldwide
Cisco’s Talos writes: For several months, Talos has been working with public- and private-sector threat intelligence partners and law enforcement in researching an advanced, likely state-sponsored or state-affiliated actor’s widespread use of a sophisticated modular malware system we call “VPNFilter.” We have not completed our research, but recent events have convinced us that the correct…