Author Archives: Dissent

NIST Publishes Preliminary Draft of Cybersecurity Framework Profile for Artificial Intelligence for Public Comment

Posted on by

Caleb Skeath, Micaela McMurrough, Alexandra Bruer, and Bryan Ramirez of Covington and Burling write: On December 16, 2025, the U.S. National Institute of Standards and Technology (“NIST”) published a preliminary draft of the Cybersecurity Framework Pro… Continue reading NIST Publishes Preliminary Draft of Cybersecurity Framework Profile for Artificial Intelligence for Public Comment→

Attorney General James Secures $500,000 from Capital Region Health Care Provider for Failing to Protect Patients’ Information

Posted on by

This is the press release referred to in a recent post: NEW YORK – New York Attorney General Letitia James today announced that her office has secured $500,000 in penalties from OrthopedicsNY, LLP (OrthopedicsNY) for failing to protect patients’ privat… Continue reading Attorney General James Secures $500,000 from Capital Region Health Care Provider for Failing to Protect Patients’ Information→

Two Cybersecurity Professionals Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

Posted on by

A federal district court in the Southern District of Florida has accepted the guilty pleas of two men to conspiring to obstruct, delay, or affect commerce through extortion in connection with ransomware attacks occurring in 2023. According to court doc… Continue reading Two Cybersecurity Professionals Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware→

Software company lacked ‘downstream’ liability for data breach

Posted on by

Eric T. Berkman reports: A software company could not face “downstream” liability for a data breach that resulted in an end-user having to settle a class action suit, the 1st U.S. Circuit Court of Appeals has decided. The end-user, Zoll Services, purch… Continue reading Software company lacked ‘downstream’ liability for data breach→

French software company fined $2 million for cyber failings leading to data breach

Posted on by

Suzanne Smalley reports: France’s data protection regulator has fined the software company Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach. In November 2022, users of a Nexpublica portal reporte… Continue reading French software company fined $2 million for cyber failings leading to data breach→

‘Why should we pay these criminals?’: the hidden world of ransomware negotiations

Posted on by

Anna Isaac reports: They call it “stopping the bleeding”: the vital window to prevent an entire database from being ransacked by criminals or a production line grinding to a halt. When a call comes into the cybersecurity firm S-RM, headquartered on Whi… Continue reading ‘Why should we pay these criminals?’: the hidden world of ransomware negotiations→

South Korean retail giant Coupang to compensate $1.1 billion to affected users over data breach

Posted on by

Lim Hui Jie reports: South Korean online retail giant Coupang said it will offer 1.69 trillion South Korean won ($1.17 billion) in compensation to 34 million users affected by a massive data breach disclosed last month. The company said in a statement … Continue reading South Korean retail giant Coupang to compensate $1.1 billion to affected users over data breach→

Goldman Sachs Says Some Clients’ Data May Have Been Exposed in Law Firm Data Breach

Posted on by

Chris Dolmetsch and Bob Van Voris report: Goldman Sachs Group Inc. warned investors in some of its alternative investment funds that their data may have been exposed in a breach at one of the bank’s law firms. In a Dec. 19 letter, Goldman said it had b… Continue reading Goldman Sachs Says Some Clients’ Data May Have Been Exposed in Law Firm Data Breach→