News & Analysis as of

Corporate Counsel Phishing Scams

Baker Donelson

Ten Key Insights from IBM's Cost of a Data Breach Report 2025

Baker Donelson on

IBM and the Ponemon Institute have released the 2025 Cost of a Data Breach Report. The report, which has become an annual late-summer tradition, highlights the evolving risks and costs associated with data breaches. This...more

Pillsbury Winthrop Shaw Pittman LLP

NYDFS Imposes $2M Penalty for Violations of its Cybersecurity Regulation

The New York State Department of Financial Services (NYDFS) announced on August 14, 2025, resolution of civil enforcement action requiring Healthplex, Inc., a licensed insurance agent and independent adjuster, to pay a $2...more

Paul Hastings LLP

You’ve Got Mail: NYDFS Enforcement Action Highlights Cybersecurity Risk of Over-Retention and Other Risks

Paul Hastings LLP on

On Aug. 14, 2025, the New York Department of Financial Services (NYDFS) issued a Consent Decree announcing that Healthplex, Inc. (Healthplex) has agreed to pay a $2 million fine, as a result of an investigation into a 2021...more

Morgan Lewis - Tech & Sourcing

Key Takeaways from the CrowdStrike Global Threat Report 2025

Published in August 2025, the CrowdStrike Global Threat Report 2025 provides a detailed overview of the evolving cyber threat landscape, drawing on data from millions of endpoints and cloud workloads worldwide....more

Davis Wright Tremaine LLP

Litigation Preparedness Following a Data Breach: Three Tips to Consider During the Incident Response Period

Data breaches come in many different forms, sizes, and levels of complexity, but they tend to share certain key facts: A third-party bad actor—whether through a phishing attack, a ransomware attack, exploitation of a zero-day...more

Faegre Drinker Biddle & Reath LLP

Federal Court Holds Bank Liable For Business Email Compromise Losses

We have written on previous occasions about the rise in frequency and severity of Business Email Compromise (BEC) cyberattacks. As explained in other posts, BEC attacks are a type of phishing scam typically targeting...more

Robinson+Cole Data Privacy + Security Insider

Beware of Luna Moth Callback Phishing Scam

Palo Alto’s Unit 42 recently issued a threat assessment alert outlining a new phishing scam that is unique and successful. The scam is believed to be carried out by the Luna Moth/Silent Ransom Group and is targeting...more

Genova Burns LLC

DoorDash Hacker Incident Illustrates Third-Party Vendor Risks and Potential Vulnerabilities

Genova Burns LLC on

​​​​​​​Hackers have increasingly focused on third-party vendors as avenues to data held by associated businesses. On August 25, 2022, DoorDash announced that it had experienced a data breach which impacted the personal...more

Proskauer - Blockchain and the Law

App Store Protected by CDA Immunity (and Limitation of Liability) for Losses from Fraudulent Crypto Wallet App

Background - The issue of fraudulent crypto-related mobile apps has received much attention of late. Back in July 2022, the FBI issued a notice, warning financial institutions and investors about instances where criminals...more

Genova Burns LLC

Potential Harm Enough For Class Action to Proceed in Data Breach Litigation

Genova Burns LLC on

The Third Circuit Court of Appeals has given new life to a putative class action suit led by a former employee of a company that suffered a ransomware attack, leading to her sensitive information being released onto the Dark...more

Eversheds Sutherland (US) LLP

DAO members may be jointly and severally liable for $55 million crypto theft

On May 2, 2022, a putative class action was filed against a decentralized autonomous organization (DAO) and its members seeking to recover $55 million in cryptocurrency losses stolen during a hack into the DAO’s decentralized...more

Latham & Watkins LLP

Decentralized Autonomous Organizations: Piercing the Digital Veil

Latham & Watkins LLP on

A complaint filed in federal court will test the boundaries of protection from liability for individuals behind decentralized autonomous organizations. On May 2, 2022, a putative class action was filed in the US District...more

Venable LLP

Legitimate DMCA Takedown Notice or Phishing Scam?

Venable LLP on

Clients should be aware of a troubling trend: phishing emails disguised as legitimate DMCA Takedown Notices. Recipients of legitimate DMCA Takedown Notices will either (a) shield themselves from copyright infringement...more

Carlton Fields

Fifth Circuit Affirms Finding of No Coverage for Phished Funds Never “Held” by Insured

Carlton Fields on

As we previously reported, in February 2021, a Texas federal court ruled that RealPage Inc. was not entitled to insurance coverage for funds diverted in an email phishing scheme because RealPage did not “hold” the diverted...more

Miles & Stockbridge P.C.

Avoid Turning One Data Breach into Two

When can a data breach get worse? When the process of notifying victims creates a second breach. Take the example of a cancer treatment center that recently paid $425,000 to settle allegations that included a faulty...more

Robinson+Cole Data Privacy + Security Insider

Phishing at the California State Controller’s Office

The California State Controller’s Office (SCO) was recently a victim of phishing. According to its website, an employee of the SCO’s Unclaimed Property Division clicked on a link in an email, entered their user ID and...more

Carlton Fields

Texas Federal Court Finds No Coverage Under Crime Policy for Phishing Scheme Because Insured Did Not “Hold” Diverted Funds and...

Carlton Fields on

RealPage was the victim of a phishing scheme that resulted in the diversion of its client funds from the bank account of a third-party payment processer, Stripe Inc. In the ensuing insurance coverage litigation styled...more

Hinshaw & Culbertson - Insights for Insurers

Fifth Circuit Affirms No Computer Transfer Fraud Coverage for Phishing Scam

The Fifth Circuit has affirmed a district court ruling that a crime policy’s Computer Transfer Fraud coverage did not apply to losses incurred in connection with an email phishing scam. See Mississippi Silicon Holdings LLC v....more

Society of Corporate Compliance and Ethics...

[Virtual Event] 2021 Alaska Regional Compliance & Ethics Conference - February 26th, 8:25 am - 4:30 pm AKST

Our Virtual Regional Compliance Conferences provide updates on the latest news in regulatory requirements, compliance enforcement, and strategies to develop effective compliance programs. Watch, listen, and ask questions from...more

Health Care Compliance Association (HCCA)

[Virtual Event] 2021 Regional Healthcare Compliance Conference - Portland, OR - February 5th, 8:25 am - 5:30 pm PST

Our Virtual Regional Healthcare Compliance Conferences provide updates on the latest news in regulatory requirement, compliance enforcement, and strategies to develop effective compliance programs. Watch, listen, and ask...more

Sands Anderson PC

Phishing Alert: CISA Reports Spoofed SBA Loan Relief Webpage!

Sands Anderson PC on

On August 12, 2020, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) reported an unknown malicious cyber actor sending phishing emails purporting to be from the Small Business...more

Epstein Becker & Green

Cyber Coverage in the Age of COVID-19 Need Not Result in Pandemonium

Epstein Becker & Green on

While businesses and their employees continue to operate in the “new frontier” of working-from-home during the COVID-19 pandemic and the gradual reopening of the economy, a serious risk continues to present itself: the threat...more

Hinshaw & Culbertson LLP

Court Rejects Coverage for Phishing Loss Under Financial Institutions Bond, Calls for More Briefing on Computer Systems Fraud...

A New Jersey federal district court held last week that losses arising out of a phishing scam were not covered under a bank's Financial Institutions Bond. In Crown Bank JJR Holding Co. v. Great Am. Ins. Co., 2020 U.S. Dist....more

Farella Braun + Martel LLP

Another Federal Circuit Finds Phishing Loss Covered Under Crime Policy

Companies of all sizes have fallen victim to attacks whereby fraudsters will use deceptive communications, such as spoofed emails, to trick an employee into transferring money into the fraudsters’ control. While these...more

Skadden, Arps, Slate, Meagher & Flom LLP

Privacy & Cybersecurity Update - January 2019

In this month's edition, we examine cybersecurity-related state Supreme Court rulings in Pennsylvania, Vermont and Illinois; the Department of Health and Human Services' cybersecurity guidelines for the health care industry;...more

39 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide