CYBERSECURITY

Call Center Attacks: Vishing Continues to Rise

Sophisticated vishing (voice phishing) attacks continue to target and victimize company call centers and help desks. Recently, a large ad tech company reported that customer information had been compromised as a result of a vishing attack. The company warns that the information obtained in the incident can be used by threat actors to conduct phishing and vishing attacks against customers through the use of emails, texts or telephone numbers. Read more

ENFORCEMENT + LITIGATION

Swiped Right, Hacked Hard: Bumble Faces Class Action Over Data Breach 

A newly filed putative class action in the Western District of Texas targets Bumble, Inc., over an alleged “massive and preventable” cyber-attack in or around January 2026, in which attackers allegedly accessed highly sensitive user data stored in Bumble’s systems. The complaint alleges the compromised information included names, dates of birth, addresses, telephone numbers, Social Security numbers, and account numbers, as well as highly sensitive, context-rich dating data such as chat history and dating history, the kind of data combination that can heighten identity-theft risk and privacy harms. Read more

Figure Lending Class Action Highlights a Familiar Threat

Figure Lending, LLC, which markets itself as America’s #1 non-bank Home Equity Line of Credit lender, has been named in a proposed federal class action following a reported cyber incident that allegedly exposed customer personal information. Mardikian v. Figure Lending, LLC, 3:26-cv-00135 (W.D.N.C. Feb. 19, 2026). The complaint alleges that the company’s systems were improperly accessed and customers’ personally identifiable information was compromised. Read more

DRONES

DJI vs. the FCC: What the “Covered List” Could Mean for Drone Operators and Manufacturers

DJI, the world’s leading manufacturer of civilian drones, has escalated its dispute with the Federal Communications Commission (FCC) by filing an appeal in the Ninth Circuit after the FCC placed many DJI products on its “covered list,” which the FCC uses for telecommunications equipment it deems an unacceptable national security risk. DJI says the decision effectively prevents it from “marketing, selling, and importing new products into the United States,” and that the order covers DJI communications and video surveillance equipment. Rather than waiting for the FCC to decide whether it will reconsider, DJI says it is appealing the decision now to protect its business and all of the consumers and businesses that reply on its products. Read more

ARTIFICAL INTELLIGENCE

Using Trademarks to Protect IP from AI

The fight between creators and big tech has mostly been focused on the alleged copyright infringement of using creative works in AI training data. However, trademark law might be the next battleground as creators look for additional ways to protect their work from AI-related misuse. Actor Matthew McConaughey recently received U.S. Registration No. 8,070,191 for his famous line, “Alright, Alright, Alright” delivered in the 1993 movie Dazed and Confused. The registration is for a sensory mark that protects the distinct intonation he made famous in the film. Read more

Privacy Tip #481

Threat Actors Continue to Use Data from Old Breaches

Researchers at UpGuard have discovered a misconfigured cloud database online while conducting routine internet scanning that contains billions of records, including 2.7 billion Social Security numbers (SSNs) and 3 billion plaintext email addresses and password combinations. The fairly easy-to-find data was accessed without authentication.

After reporting the access to the FBI’s Internet Crime Complaint Center (IC3) and the German hosting provider Hetzner, the database was taken down.

Learn about how consumers can protect themselves from identity theft and fraud in this week's privacy tip. Read more

RECENT EVENTS AND NEWS

 Data Privacy + Cybersecurity Team Receives 2026 Readers' Choice Awards

Data Privacy + Cybersecurity team and AI practice chair Linn Freedman and partner Kathryn M. Rattigan have once again been recognized as “Top Authors” as part of JD Supra’s annual Readers’ Choice Awards.

Linn continues to be the #1 author in the area of Cybersecurity, with 2026 being the 11th consecutive year she’s achieved the designation. In addition to her role as chair of the firm’s Data Privacy + Cybersecurity team and AI practice, Linn is also the editor of the Data Privacy + Cybersecurity Insider blog. Kathryn was also named a “Top Author” in the area of Cybersecurity for a sixth consecutive year and is a regular author for the Insider blog. In addition, Robinson+Cole was recognized as a “Top Firm” in the area of Cybersecurity for the tenth consecutive year.

Linn and Kathryn’s selection underscore their continued excellence from the over 70,000 professionals whose 2025 published insights and commentary were read by C-Suite executives, in-house counsel, media, and others across various industries highlighted on JD Supra’s platform and who are interested in the defining topics impacting business today. To read more about the awards, click here.