Texas Bar Journal 2019 Cybersecurity & Data Privacy Update

The Texas Bar Journal’s 2019 year-end Cybersecurity & Data Privacy Update was once again provided by Shawn Tuma and addressed the following issues: Texas' New Data Breach Notification Requirements effective January 1, 2020Whether website scraping allegations are sufficient to invoke Texas and federal "hacking" lawsWhether viewing pictures on another's cellphone violates Texas "hacking" lawCyber Insurance -- why … Continue reading Texas Bar Journal 2019 Cybersecurity & Data Privacy Update

former employee = current data thief

Fifth Circuit Upholds CFAA Conviction for Former Employee’s Misuse Causing Damage Based on Circumstantial Evidence

In United States v. Anastasio N. Laoutaris, 2018 WL 614943 (5th Cir. Jan. 29, 2018), the United States Fifth Circuit Court of Appeals affirmed a jury verdict finding Laoutaris guilty of two counts of computer intrusion causing damage, in violation of 18 U.S.C. § 1030(a)(5)(A) and (c)(4)(B)(i) of the Computer Fraud and Abuse Act. Laoutaris … Continue reading Fifth Circuit Upholds CFAA Conviction for Former Employee’s Misuse Causing Damage Based on Circumstantial Evidence

Former Cardinals exec sentenced to prison for hacking Astros

HOUSTON (AP) — A federal judge sentenced the former scouting director of the St. Louis Cardinals to nearly four years in prison Monday for hacking the Houston Astros' player personnel database and email system in an unusual case of high-tech cheating involving two Major League Baseball clubs. Source: Former Cardinals exec sentenced to prison for … Continue reading Former Cardinals exec sentenced to prison for hacking Astros

Can a Company Remotely Wipe an Ex-Employee’s Device?

Note: this article was previously posted on Norse's DarkMatters. One of my favorite sayings about cyber risk is “an ounce of prevention is cheaper than the very first day of litigation.” A recent case provides a nice example of exactly what I mean. In this case, an effective BYOD policy could have saved this company … Continue reading Can a Company Remotely Wipe an Ex-Employee’s Device?

Departing Employee Taking Data from “Restricted” but Unsecured Folder Doesn’t Violate CFAA

TAKEAWAYS: If your company intends to limit its employees access to certain information on the company network, (1) make sure appropriate technological restrictions are in place and are working; and (2) make sure there are appropriate policies or other documentation in place to show the employees subjectively knew it was off limits. When an employer … Continue reading Departing Employee Taking Data from “Restricted” but Unsecured Folder Doesn’t Violate CFAA