Robinson Cole LLP
High Contrast Mode
August 20, 2026 - R+C Newsletter

Data Privacy + Cybersecurity Insider

Share this page:

CYBERSECURITY

Medusa Ransomware Hitting Healthcare Industry’s Unpatched Software Vulnerabilities

On August 18, 2026, the Cybersecurity & Infrastructure Security Agency, Federal Bureau of Investigation, and U.S. Department of Health & Human Services issued an update to a previous advisory to the health care industry warning against Medusa ransomware. The advisory provided tactics, techniques, and procedures as well as the indicators of compromise gathered to assist with response and remediation. Read more


ENFORCEMENT + LITIGATION

Check Out Before Checkout: The FTC’s Settlement with Doxo and Payment Flow Risk

On August 17, 2026, the Federal Trade Commission (FTC) announced a $2.1 million settlement with online bill-payment company Doxo over allegations that the company, and its two co-founders, deceived consumers through search ads, fees, and subscription practices. The case shows that consumer protection risk can begin at the first click, especially when ads or landing pages make a third-party service look like an official payment channel. Read more


ARTIFICIAL INTELLIGENCE

From AI Policy to AI Control: Building Governance That Works

AI governance is often treated as a policy problem: define approved uses, create an oversight framework, publish acceptable use rules, and document compliance. These steps matter, especially as increasingly more regulations are introduced that raise expectations for accountability, transparency, data governance, and lifecycle risk management. However, the harder question for many organizations is no longer whether they have AI rules in place, but whether those rules can keep pace with how AI is being adopted across the business. Public AI tools, embedded platform features, developer copilots, automated workflows, and AI agents are often introduced faster than security, legal, compliance, and risk teams can map what they access, what they influence, and what new exposures they create. Read more


PRIVACY TIP #504

What is Spyware?

This week, Apple notified customers in 110 countries around the world (150 countries to date) that they “may have been targeted with spyware capable of hacking into their devices.” Apple notifies users “directly on their iPhone lock screen with a push notification that urges the person to take action.” The threat alert will read “Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to protect your data and device.” Apple will send notifications to users via email as well.

Apple is actively notifying users who may have been targeted by advanced spyware attacks. Learn how to effectively safeguard your data, privacy, and device security in this week’s Privacy Tip. Read more


RECENT NEWS

Kathryn Rattigan and Elizabeth Salsedo-Surovov to Present on Artificial Intelligence + Knowledge Management at ILTACON 2026

Artificial Intelligence team partner Kathryn Rattigan and Director of Knowledge Management and Information Resources Elizabeth Salsedo-Surovov will present two separate panel discussions at the ILTACON 2026 Annual Educational Conference, from August 23-27, 2026, in Nashville, Tennessee.

Kathryn’s panel, titled, “AI as a Teammate: Use Cases That Drive Talent Development,” will focus on concrete, real-world legal use cases that show how firms are embedding AI into everyday workflows as a collaborative support layer rather than a substitute for legal judgment or training.

Liz’s panel, titled, “KM + AI – From Inspiration to Implementation,” will examine how knowledge management (KM) functions are evolving to support AI-driven legal work from operational, technical, and strategic perspectives.