Lawsuits can clarify how cybersecurity failures, breach evidence, and data-protection duties affect liability and organizational risk.
Search across headline titles and summaries.
Background for this topic.
A lawsuit is a court proceeding in which one party seeks a legal remedy from another. In information security, cases may allege inadequate protection of personal data, unauthorized access or use of systems, misuse of intellectual property, breach of a security contract, or failure to meet privacy obligations. A lawsuit is distinct from regulatory enforcement, although the same incident can lead to both.
For security practitioners, litigation can make operational records and technical evidence important. Organizations may need to preserve logs, alerts, system images, tickets, configurations, policies, and incident timelines in a reliable, access-controlled form; altering or routinely deleting relevant data can undermine fact-finding. Claims may also examine whether safeguards, vulnerability remediation, access controls, breach decisions, privacy disclosures, and supplier oversight matched documented risks and contractual duties. Clear control ownership and contemporaneous incident records therefore support both defense and accurate accountability, subject to applicable legal requirements.
High-Profile Case Ends After Judge Guts SEC’s Cyber Fraud AllegationsThe SEC has dropped its remaining claims against SolarWinds and CISO Tim Brown, ending a controversial cyber fraud lawsuit that aimed to expand securities law to cover operational security failures tied to the 2020 Russian hacking campaign.
The U.S. Securities and Exchange Commission (SEC) has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack
Company 'clearly delighted' with the outcome The US Securities and Exchange Commission (SEC) has abandoned the lawsuit it pursued against SolarWinds and its chief infosec officer for misleading investors about security practices that led to the 2020 SUNBURST attack.…
Data of Nearly 470,000 Patients and Employees May Have Been Leaked on Dark WebOmni Family Health, a California nonprofit network of community health centers, has agreed to pay $6.5 million to settle proposed class action lawsuits related to a 2024 hack that may have exposed the personal information of nearly 470,000 current and former patients and employees on the dark web.