Data Privacy + Cybersecurity Insider
CYBERSECURITY
The Impact of Stolen Credentials
This week, Schneider Electric confirmed that it is investigating a security incident involving its JIRA internal development platform. The attacker group, “Grep,” allege that it stole 40 GB of data from the JIRA platform by using stolen credentials, including “75,000 unique email addresses and full names for Schneider Electric employees and customers.” Grep posted on a dark web site that it is demanding $125,000 to not leak the data. Read More
ENFORCEMENT + LITIGATION
Precious-Metal Refiner Hit with Data Breach Class Action over 2023 Cyber-Attack
Elemetal LLC faces a data breach class action resulting from its alleged failure to implement appropriate security measures, which led to a 2023 breach of approximately 13,000 customers’ personal information. Elemetal is a precious-metal refiner based in Texas, operating in more than 45 locations in the U.S. Read More
Ex-Yahoo! Patents Asserted Against Fashion Retainer Shein
In the early to mid-2000s, Yahoo! worked to develop and refine its search engine capabilities. During this period, Yahoo! obtained U.S. Patent Nos. 8,341,157; 7,698,329; 8,209,317; 9,805,097; and 8,527,623, which are generally related to improving the quality of search engine results. For example, the ’623 Patent relates to a method of detecting a user vacillation pattern and providing information to help remove the user’s indecision. Read More
DATA PRIVACY
Columbus, Ohio Notifies 500,000 of Data Breach from Ransomware Attack
The city of Columbus, Ohio, announced on May 29, 2024, that a ransomware attack forced its systems offline. According to its notice, the attack was perpetrated by “an established, sophisticated threat actor operating overseas,” and that it was working with law enforcement to investigate the incident. The culprit behind the ransomware attack is reported to be Rhysida. Read More
Last week, the California Privacy Protection Agency (CPPA) announced it will conduct a public investigative sweep of data broker registration compliance under the California Delete Act.
Pursuant to the Act, a “data broker” is “a business that knowingly collects and sells to third parties the personal information of a [California] consumer with whom the business does not have a direct relationship.” Read More
PRIVACY TIP
Privacy Tip #420 - Is that Consumer Review Real or AI Generated?
Are you fooled by fake reviews online for restaurants, consumer products, and places to stay? This week, the FTC made good on its promise to combat fake reviews by issuing a proposed Order against GGL Projects, Inc., which does business as Sitejabber. Find out more in this week's Privacy Tip. Read more
RECENT EVENTS AND NEWS
Robinson+Cole Receives Tier 1 Best Law Firms ® Metropolitan Ranking in Privacy and Data Security Law
Privacy and Data Security in Rhode Island was among the 45 first-tier metropolitan rankings Robinson+Cole received in the 2025 Edition of Best Law Firms®. Law firms included in the publication are recognized for professional excellence with consistently impressive ratings from clients and peers. Best Law Firms rankings are based on a rigorous evaluation process that includes the collection of client and lawyer evaluations, peer review from leading attorneys in the field, and review of additional information provided by law firms as part of the formal submission process. To be eligible for a 2025 ranking, a law firm must have at least one lawyer recognized in the 31st Edition of The Best Lawyers in America® for that particular geographic jurisdiction and practice area. The full methodology can be found here. Read more.
Kate Dion and Kathryn Rattigan to Discuss How to Create an Effective Higher Education AI Compliance Program at CCIC 2024 Annual Member Forum
Education Industry Team chair Kathleen Dion and Artificial Intelligence Team partner Kathryn Rattigan will present a webinar entitled “Creating an Effective AI Compliance Program for Your Campus” as part of the Connecticut Conference of Independent Colleges’ (CCIC) Annual Member Forum on November 15, 2024. Kate and Kathryn’s presentation will focus on the challenges of integrating artificial intelligence (AI) into higher education, including its ethical use, data privacy, security, and the potential for algorithm bias, and how higher education institutions can effectively create an AI compliance program that establishes clear guidelines on AI use while assisting campus stakeholders in understanding AI tools and capabilities. Learn more
