Lawsuits can clarify how cybersecurity failures, breach evidence, and data-protection duties affect liability and organizational risk.
Search across headline titles and summaries.
Background for this topic.
A lawsuit is a court proceeding in which one party seeks a legal remedy from another. In information security, cases may allege inadequate protection of personal data, unauthorized access or use of systems, misuse of intellectual property, breach of a security contract, or failure to meet privacy obligations. A lawsuit is distinct from regulatory enforcement, although the same incident can lead to both.
For security practitioners, litigation can make operational records and technical evidence important. Organizations may need to preserve logs, alerts, system images, tickets, configurations, policies, and incident timelines in a reliable, access-controlled form; altering or routinely deleting relevant data can undermine fact-finding. Claims may also examine whether safeguards, vulnerability remediation, access controls, breach decisions, privacy disclosures, and supplier oversight matched documented risks and contractual duties. Clear control ownership and contemporaneous incident records therefore support both defense and accurate accountability, subject to applicable legal requirements.
The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.
Investors roll the dice against government sanctions and lawsuits Spyware maker NSO Group has a new ringleader, as the notorious biz seeks to revamp its image amid new reports that the company's Pegasus malware is targeting yet more human rights advocates and journalists.…