Security News

Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M
2025-01-16 17:32

That's in addition to the $4.5M fine paid to three state AGs last year Enzo Biochem has settled a consolidated class-action lawsuit relating to its 2023 ransomware incident for $7.5 million.…

Apple offers to settle 'snooping Siri' lawsuit for an utterly incredible $95M
2025-01-02 21:15

Even the sound of a zip could be enough to start the recordings, according to claims Apple has filed a proposed settlement in California suggesting it will pay $95 million to settle claims that...

NSO Group Exploited WhatsApp to Install Pegasus Spyware Even After Meta's Lawsuit
2024-11-18 05:52

Legal documents released as part of an ongoing legal tussle between Meta's WhatsApp and NSO Group have revealed that the Israeli spyware vendor used multiple exploits targeting the messaging app...

23andMe settles class-action breach lawsuit for $30 million
2024-09-16 02:30

Also: Apple to end NSO Group lawsuit; Malicious Python dev job offers; Dark web kingpins busted; and more Infosec In Brief Genetic testing outfit 23andMe has settled a proposed class action case...

That cyber-heist of 2.9B personal records? There's a class-action lawsuit looming for that
2024-08-05 17:58

A lawsuit has accused a Florida data broker of carelessly failing to secure billions of records of people's private information, which was subsequently stolen from the biz and sold on an online criminal marketplace. California resident Christopher Hofmann filed the potential class-action complaint against Jerico Pictures, doing business as National Public Data, a Coral Springs-based firm that provides APIs so that companies can perform things like background checks on people and look up folks' criminal records.

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin
2024-07-18 21:06

A judge has mostly thrown out a lawsuit brought by America's financial watchdog that accused SolarWinds and its chief infosec officer of misleading investors about its computer security practices and the backdooring of its Orion product. In a Thursday ruling [PDF], US federal district Judge Paul Engelmayer dismissed all of the so-called "Post-SUNBURST" claims the SEC levied against SolarWinds.

Merged Exabeam and LogRhythm cut jobs, face lawsuit
2024-07-17 23:27

Exabeam and LogRhythm - a pair of cyber security firms - finalized their merger on Wednesday, an occasion The Register understands was marked by swift job cuts and shareholder action to investigate the transaction. The merger of LogRhythm and Exabeam is a private transaction, and we will not be disclosing details on the value or structure of the deal.

New Lawsuit Attempting to Make Adversarial Interoperability Legal
2024-05-06 11:03

About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

AT&T faces lawsuits over data breach affecting 73 million customers
2024-04-03 16:28

AT&T is facing multiple class-action lawsuits following the company's admission to a massive data breach that exposed the sensitive data of 73 million current and former customers. The lawsuit alleges that AT&T failed to adequately protect customers' personal data, leading to a cyberattack and subsequent data breach that exposed sensitive information for 73 million people.

Class-Action Lawsuit against Google’s Incognito Mode
2024-04-03 11:01

Google has agreed to delete "Billions of data records" the company collected while users browsed the web using Incognito mode, according to documents filed in federal court in San Francisco on Monday. The agreement, part of a settlement in a class action lawsuit filed in 2020, caps off years of disclosures about Google's practices that shed light on how much data the tech giant siphons from its users­-even when they're in private-browsing mode.