Allison Grande

A pediatric health network and its information technology manager have agreed to pay $2.7 million to resolve the New York and Connecticut attorneys general's claims that they failed to institute "common" security measures to protect the personal data of patients impacted by a 2024 data breach, the states announced Friday. 

The recent hack of the FBI's jobs portal underscores mounting cyberthreats to government agencies and critical infrastructure, fueling the debate over whether internal fixes or formal regulation can best address the growing cyber risks powered by artificial intelligence.

An Astrana Health unit was the target of a "series" of social engineering cyberattacks in which hackers impersonated the company's employees to gain access to systems that contained private and confidential information about patients and others, the healthcare provider disclosed in a recent regulatory filing. 

Senate Version Of Kids' Online Safety Legislation Clears Panel

State Privacy Enforcer Consortium Adds Vermont To Ranks

A Pennsylvania federal judge has mostly refused to toss a putative class action accusing Warren General Hospital of illegally deploying tracking technology that divulged website visitors' private health information to Meta and others, trimming injunctive relief and negligence per se allegations while allowing state wiretap and six other claims to proceed.

A Pennsylvania federal judge has mostly refused to toss a putative class action accusing Warren General Hospital of illegally deploying tracking technology that divulged website visitors' private health information to Meta and others, trimming injunctive relief and negligence per se allegations while allowing state wiretap and six other claims to proceed.

New Jersey regulators won't immediately enforce a sweeping data broker law that took effect in June, announcing Friday covered businesses have to register and pay a potentially hefty registration fee until spring, and it would consider complaints about the law's lack of clarity in policing its sensitive data sales ban.

A California federal judge rejected a bid by plaintiffs suing software vendor Accellion over a sprawling data breach to broaden a previous order that limited class certification to allow only for the recovery of nominal damages, finding the introduction of a new damages expert wasn't enough to change the outcome.

A California federal judge has tossed, with permission to amend, a putative class action accusing Google of secretly tracking its email, chat and videoconferencing users' private communications through its Gemini AI assistant, finding that the plaintiffs had failed to provide enough specifics about what data Google accessed or any future harms they may face.