Legal Developments and Risk Management Tips Impacting the Professional Liability Community.
Most professionals are aware of the April 15 tax deadline. We know that fraudsters certainly are! As Tax Day approaches in the U.S., we encourage all to be mindful of several phishing campaigns that Microsoft has observed using tax-related themes for social engineering to steal credentials and deploy malware. These campaigns notably use redirection methods … Continued
As the digital landscape continues to evolve, so do the challenges surrounding privacy and data protection, particularly in the legal profession. Law firms are increasingly handling sensitive client information, creating potential pitfalls that could lead to legal malpractice claims if not managed properly. This blog post delves into emerging trends in privacy and data protection … Continued
The new, must-listen podcast for all things management and professional liability, “The Precipice,” is back for the second episode of the series. “The Precipice,” hosted by Goldberg Segalla partner Peter J. Biging and presented by the Professional Liability Underwriting Society (PLUS), is a tremendous resource for professionals through in-depth conversations with industry leaders, claims experts, … Continued
A lawsuit that included allegations ranging from gross negligence to false and deceptive advertising over nearly three decades, brought against a major international insurance brokerage represented by Goldberg Segalla, has been dismissed by a New York court. The case stemmed from a cyberattack and social-engineering scheme that resulted in the loss of nearly $3 million … Continued
Hackers have successfully hit at least five US law firms within the past few weeks. Reportedly, the attacks are part of a coordinated effort potentially affecting nearly 200 victims in January alone. As if that were not frightening enough, the threat to law firms and to their clients, has magnified substantially in light of the type of attack now employed against law firms.
Attorneys practicing in mergers and acquisitions are familiar with the sensitive nature of their work and the potential for abuse of the information obtained. In addition to being restrained from trading on that information themselves, they must take extensive precautions to ensure that they do not allow that information to slip to friends, family members, or colleagues. Unfortunately, one cannot assume that others won’t use that information to make trades that could ensnare both the attorney and firm in extensive criminal and civil litigation, regardless of intent. Accordingly, both formal and informal mechanisms are put in place to keep potential inside information from those who are not required to have it in their work.
One of the primary points of contention in data breach actions is when, and whether, sufficient damages exist to meet the standing requirements under Article III. Circuit courts across the country have come to different conclusions, with some requiring a showing of actual damage and others allowing the existence of the breach to essentially serve as confirmation that the data will be used illicitly. According to a recent brief in support of certiorari, the DC Circuit falls into the latter category and a review by the Supreme Court is necessary to resolve the current circuit split.
Huge cybersecurity breaches at major retailers caught the attention of the public and have made headlines. Now, more recent breach at one of the major credit reporting agencies has the attention of Congress. 48 states and the District of Columbia already have some form of legislation governing security breaches. These statutes typically begin by laying out who is subject to the requirements, such as businesses and information brokers, and what information is considered protected “personal information.” The laws then outline what constitutes a breach, the requirements for providing notice, and exemptions to the law. What’s next, Congress?
Today it seems as though cyber-security protections are always a half-step behind hackers. For every patch that quietly protects from one type of ransomware, there’s another WannaCry infecting a major company or financial institution. Of course, cyber-security is an important concern for all businesses, including professionals, a point which is still gaining awareness across the country. As these less technologically sophisticated businesses learn more about the importance of cyber-security in the modern world, it can be easy to forget that there are many everyday protections that are just as valuable as the software that protects your data.
Businesses are increasingly becoming the targets of sophisticated cyber-attacks, and professionals are no exception. When cyber-criminals breach a professional service firm, they not only may gain access to the firm’s corporate data, but also confidential information from the firm’s clients. Therefore, it is incumbent on all professionals to make data security a priority.