Biden Signs Better Cybercrime Metrics Act into Law

May 19, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: The new Better Cybercrime Metrics Act will help the federal government track, measure, analyze, and prosecute cybercrime. On May 6, 2022, President Biden signed into law the Better Cybercrime Metrics Act.[1] This Act encourages local law enforcement to report incidents of cybercrime to the FBI to build a database of... Read More

Poisoned Robots: Data Poisoning Threatens AI-Powered Mechanisms

May 12, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: Companies need to be vigilant about feeding their machines clean data to avoid hackers poisoning their networks. Artificial intelligence is everywhere: from facial recognition technology to weather forecasting.  As we get better at training computers to become more sophisticated with prediction models, hackers are developing stealthier methods to poison... Read More

New CIRCIA Bill and What It Means for Whistleblowers

May 3, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: Uncertainties over threats of cyberattacks resulted in both the House and Senate passing CIRCIA, which created an opportunity for whistleblowers to come forward under the False Claims Act with information about agencies and contractors failing to report cybersecurity breaches in a timely manner. Following CIRCIA, Congress voted to pass the Better Cybercrime Metrics Act to help analyze the effectiveness of cybercrime... Read More

Cybersecurity Class Actions Drawing a Split Among Circuit Courts

April 13, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: In the wake of a data breach, a class of Plaintiffs whose personal and/or financial information is disseminated to third parties all share the same concern – the risk of future harm. But in order for these Plaintiffs to have standing to sue over the wrongful dissemination of their... Read More

Top Cybersecurity Threats Your Organization May Face this Year

April 5, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: With increasing numbers of cybersecurity attacks, foreign and domestic, organizations are even more likely to experience some kind of data breach threat this year. Knowing what that threat looks like, allows organizations to arm themselves against these eminent attacks and to implement policy regulations in time to prevent absolute... Read More

CISA Shields Up

March 31, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: CISA’s Shield Up Guidance Emphasizes Incident Response Planning With the specter of an expanding war in Europe, the threat of cyber retaliation by Russia, or Russian-sponsored actors, is increased. In response, the Cybersecurity and Infrastructure Security Agency (“CISA”) released its Shields Up Guidance to help organizations and supply chains... Read More

Cybersecurity: Board of Director Litigation Risk

February 22, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: With the surge of data and cybersecurity breaches, corporate directors and officers have become targets for shareholder derivative lawsuits. Fortunately, there are procedural measures that directors and officers can put in place in order to mitigate the risk of litigation. The standard in shareholder derivative actions is based off... Read More

BEWARE Pension Plan Trustees: The United States Supreme Court has Reinforced Your Responsibility

January 31, 2022

Blog, Insights & Impact Business Blog, Keep Informed

On Monday, January 24, 2022 the United States Supreme Court issued its much-anticipated opinion in the Hughes, et al. v. Northwestern University, et al. case. Before the Court was the issue of whether Northwestern University violated its fiduciary duty to a class of employee-investors under ERISA by allegedly including unnecessarily... Read More

Log4j – Who does it impact?

January 25, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway:  Organizations of all types and sizes should actively manage exposure to loss due to the Log4j vulnerability. Doing so will not be easy. The Log4j program is present in so many applications that the magnitude of the issue is unlike any other. Following CISA guidance and adherence to a... Read More

Data Breach Lessons from Recent Robinhood Lawsuit

December 8, 2021

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: For most companies, following the SHIELD or FTC practices are sufficient to establish a reasonable security program that should protect companies from civil liability or penalty. But companies storing large amounts of personal information, or valuable proprietary information, should consider even greater controls and protections. Robinhood, a stock trading... Read More