Blog

Hims&Hers Health has been sued for making it difficult to cancel and violating privacy of their customers by unlawfully sharing their customer's sensitive health information. In this law suit, the company is accused of sharing health conditions to advertisers via pixels on their website. If you are a business, be very careful with your pixels and what gets shared with advertisers. The FTC is on high alert and you may be likely to get sued if you approach without caution.

ShinyHunters Group - a large ransomware gang - extorted Cl0p, another ransomware group. They stole Cl0p's data and they're bragging about it. This is scary for victims. Think about it: if you've already dealt with an incident once (let's say through Cl0p), now you have to deal with it again? Could you be re-ransomed? Theoretically, YES. If you have any questions about how this could affect you, we'd love to help! 📧: sarah@legallycyber.com 📞: 225.256.2892 💻: legallycyber.co

OpenAI just admitted to "misalignment of the models" and we are not shocked. The problem here is that OpenAI is bypassing safeguards, uploading private documents to the Internet, creating tasks that don't exist, etc. The lesson: Be very careful before you implement AI into your workplace. We'd love to help! Contact Sarah and the SWA team today: 📧: sarah@legallycyber.com 📞: 225.256.2892 💻: legallycyber.com

If your company has suffered a cyberattack and publicly addressing it feels like asking yourself to stand on a scale naked... 🚫 STOP right there. It is NOT just you! So many large entities - with big and small IT budgets - have been there. It happens to everyone! From CISA, Microsoft, Shell, Ernst and Young, and so many more... Do not be ashamed. Always report it. And if you have any questions, we'd love to help! sarah@legallycyber.com

What should you expect when you report a cyber crime to the FBI's Internet Crime Center? Maybe nothing. Sometimes it feels like the information is just one sided (from you to them). THIS IS NORMAL! The FBI's job is to collect information to fight crime on a national and global level - not to respond to every report. So here's our recommendation: ALWAYS report, just don't always expect a response!

Breach Fatigue is real, but cybercrime groups like ShinyHunters are using stolen data in a new way: pulling email lists from past corporate breaches to target you with personalized sextortion threats for cryptocurrency payments. These scams can feel convincing, but it's almost always a scare tactic using recycled public leak data. If this hits your inbox: Don't panic or pay – it’s an empty threat Report the email to law enforcement (IC3) Reach out to Sarah Anderson and our te

Five NEW cyber crime groups have popped up: ExfilSquad The Booba Project (also referred to as "Booba Group") Crpxo Global Secret Group Section 9 It's important to be aware of this because it shows that cyber crime is multiplying at a frequency that is hard to keep up with. Watch for more and let us know if we can help!

Apple boasts repetitively that it vets all apps in their Apple App Store. Well, citizens from Massachusetts and Louisiana recently filed suit because of a fake cryptocurrency app called "Sparrow." Interestingly enough - this particular app didn't have an IOS platform - an easy indicator of an unverified app for Apple to spot. Watch as Sarah shares the ins and outs of this case and think twice next time you visit the App Store.

Update on the multi-state lawsuit against 23andMe. After having no intrusion protective systems in place, 23andMe suffered a massive data breach in October 2023. Cybercriminals compromised the genetic data of 6.9 million consumers worldwide. 42 states reacted in this joint lawsuit. WATCH as Sarah Anderson shares the details of this case including settlement amount - $18 million across 42 states.

The Take it Down Act is now enforceable, and the fines for violating this Act are over $53,000! This new law bans the nonconsensual online publication of intimate images of individuals - including AI-generated deepfakes. This is a MAJOR victory for anyone who has been a victim of the publishing of images and/or videos without their consent.

Recently, a client of ours reached out to SWA Law after their breach counsel, recommended by their insurance company, did not submit reimbursements to the insurance company. SWA stepped in and recovered more than $600,000 for incident response expenses. Six hundred thousand dollars! Their previous breach counsel didn't even ask for it. The lesson: you have a choice when it comes to which breach counsel you want to use. Looking for one? We'd love to be considered!

Louisiana enacts its first Louisiana Data Privacy Act. It looks a whole lot like the other 21 states' privacy acts. This new act applies to entities with more than $20M in gross revenue collecting more than 75,000 different people's personal identity information. WATCH to learn more about this new law as Sarah Anderson explains.

CAUTION when buying World Cup tickets! Threat actors are creating legitimate websites (think fiffa[.]com) to trick users into believing they're interacting with an official brand - fifa.com. WATCH as Sarah Anderson explains what's happening and how you can stay aware and alert!

Here's what nobody told you when HR bought that AI hiring tool: when it discriminates, the vendor doesn't get sued. You do. Businesses - before you choose to engage AI vendors in your hiring process, check with legal counsel. We'd love to help!

Fraudsters aren't hacking credit unions anymore. They're applying for loans - like everyone else. The only difference is, the identity isn't theirs. It's yours. And they got it off your social media. And they're getting approved. WATCH as Sarah explains how this is happening and what you should be cautious of.

Can you imagine it taking 56 minutes to wipe 96 federal databases? After serving their sentence, the Akhter brothers were rehired as government contractors. No background check required. WATCH to hear Sarah explain what that skipped 15 minute background check cost this government contractor.

Canvas - a widely used Learning Management System - was hacked twice in four days. The lesson here: when you undergo incident response, the cheap and easy route is usually not the best.

Washington State's Governor just signed a new law regarding Artificial Intelligence. Starting January 1, 2027, all entities using an AI companion Chatbot must disclose to users that they are interacting with a machine and not an actual person. WATCH as Sarah dives into the details and if you have any follow-up questions, we'd love to hear from you!

3 New Laws about cyber security you should know about: 1. Alabama introduces a new consumer data privacy law regarding minors 2. Oklahoma introduces a consumer data privacy law with a $7,500 penalty 3. South Dakota introduces a genetic privacy law with a $5,000 fine Watch as Sarah gives you a brief overview, then check out our blog for links to all three of these new laws today!

Never engage in ransomware demands. That's it. That's the message. Watch as Sarah dives into a recent incident where DigitalMint - a cyber security firm - found several of its staff cooperating with BlackCat. If you have any questions about what to do when you see a demand for ransom, reach out to Sarah!