Tag Archives: Data Breach

If You Don’t “WannaCry” After a Cyber Attack, Review Your Cyber Insurance Coverage

By Hunton & Williams LLP on
As we previously reported, beginning last Friday, and still occurring today, one of the worst and most widespread malware attacks has impacted more than 200,000 victims in at least 150 countries. The attack is a reminder of the importance of cyber insurance coverage. Businesses affected by these types of attacks can incur significant loss, including for the ransom amount, any resulting business interruption, the cost of any lost data, damage to customers and other third parties, along with associated public relation expenses.… Continue Reading

Global Ransomware Attacks Raise Key Legal Considerations

By Hunton & Williams LLP on
On May 12, 2017, a massive ransomware attack, known as “WannaCry,” began affecting tens of thousands of computer systems in over 100 countries. These types of incidents can have significant legal implications for affected entities and industries for whom data access and continuity is critical. As affected entities work to understand and respond to the threat of ransomware, we address some of the key legal considerations.… Continue Reading

New Jersey Moves Forward with Shopper Privacy Bill

By Justin Keslowitz on
On September 15, 2016, the New Jersey Senate unanimously approved a bill that seeks limit retailers’ ability to collect and use personal data contained on consumers’ driver and non-driver identification cards. The bill, known as the Personal Information and Privacy Protection Act, must now be approved by the New Jersey Assembly.… Continue Reading

“As Seen on TV” — Insurer Must Defend Well Known Television Marketer in Data Privacy Suit

By Michael S. Levine and Jennifer E. White on
GDPRIn a June 1, 2016 decision, the Second Circuit Court of Appeals reminded retailers and product manufacturers to look to their insurance coverages when defending against consumer class actions. The Second Circuit required CNA Financial Corporation to defend E. Mishan & Sons, Inc. – best known for its “As Seen on TV” products – in two class actions alleging a conspiracy to trap customers into recurring credit card charges and that Emson sold private consumer information that it obtained through its product sales.… Continue Reading

Hunton & Williams Launches Cyber and Physical Security Task Force

By Hunton & Williams LLP on
Hunton & Williams LLP announces the formation of a Cyber and Physical Security Task Force to assist companies in minimizing the risks and consequences of a serious security incident. The task force is being led by global privacy and cybersecurity head Lisa Sotto, cybersecurity partner Paul Tiao, and energy partner Kevin Jones, and includes lawyers from a wide range of practice groups within the firm. … Continue Reading

FCC Reaches Settlement with Cable Operator over Customer Data Breach

By Hunton & Williams LLP on
As reported on the Privacy & Information Security Law blog, the Enforcement Bureau of the Federal Communications Commission (“FCC”) entered into a Consent Decree with cable operator Cox Communications to settle allegations that the company failed to properly protect customer information when the company’s electronic data systems were breached in August 2014 by a hacker. … Continue Reading

Federal Court: Attorney-Client Privilege and Work-Product Doctrine Upheld for Materials Associated with Internal Data Breach Investigation

By Hunton & Williams LLP on
As reported in the Privacy & Information Security Law blog, the United States District Court for the District of Minnesota, in large part, upheld Target’s assertion of the attorney-client privilege and work-product protections for information associated with a privileged, internal investigation of Target’s 2013 data breach.… Continue Reading

Target Data Breach Litigation: District Court Certifies Class of Financial Institutions

By Hunton & Williams LLP on
Target Data Breach LitigationAs reported in the Privacy & Information Security Law blog, Judge Magnuson of the U.S. District Court for the District of Minnesota certified a Federal Rule of Civil Procedure 23(b)(3) class of financial services institutions claiming damages from Target Corporation’s 2013 data breach. The class consists of “all entities in the United States and its … Continue Reading
LexBlog