Blog

Here's what nobody told you when HR bought that AI hiring tool: when it discriminates, the vendor doesn't get sued. You do. Businesses - before you choose to engage AI vendors in your hiring process, check with legal counsel. We'd love to help!

Fraudsters aren't hacking credit unions anymore. They're applying for loans - like everyone else. The only difference is, the identity isn't theirs. It's yours. And they got it off your social media. And they're getting approved. WATCH as Sarah explains how this is happening and what you should be cautious of.

Can you imagine it taking 56 minutes to wipe 96 federal databases? After serving their sentence, the Akhter brothers were rehired as government contractors. No background check required. WATCH to hear Sarah explain what that skipped 15 minute background check cost this government contractor.

Canvas - a widely used Learning Management System - was hacked twice in four days. The lesson here: when you undergo incident response, the cheap and easy route is usually not the best.

Washington State's Governor just signed a new law regarding Artificial Intelligence. Starting January 1, 2027, all entities using an AI companion Chatbot must disclose to users that they are interacting with a machine and not an actual person. WATCH as Sarah dives into the details and if you have any follow-up questions, we'd love to hear from you!

3 New Laws about cyber security you should know about: 1. Alabama introduces a new consumer data privacy law regarding minors 2. Oklahoma introduces a consumer data privacy law with a $7,500 penalty 3. South Dakota introduces a genetic privacy law with a $5,000 fine Watch as Sarah gives you a brief overview, then check out our blog for links to all three of these new laws today!

Never engage in ransomware demands. That's it. That's the message. Watch as Sarah dives into a recent incident where DigitalMint - a cyber security firm - found several of its staff cooperating with BlackCat. If you have any questions about what to do when you see a demand for ransom, reach out to Sarah!

Recently, as Sarah was monitoring Coinbase Cartel's website, she saw an ad for "insiders." In short, this company will pay your disgruntled employees to help them access your data. Just another reason to tighten security procedures today (not when you have more time). WATCH as Sarah dives into the details. If you have any questions? Connect Sarah with your IT Department today!

Be very cautious before you spend thousands of dollars on an expert witness for your technology case. REMEMBER: Not everyone is created equal. WATCH to learn more!

There are now fake enterprise Virtual Private Networks (VPNs) convincing employees who work remotely to enter their credentials. Pro tip: only allow downloads directly from the manufacturers website or through your MSP to ensure your employees do not fall prey to any of these very convincing deep fakes.

Stryker Medical Group was hit with a cyber attack in early March where an Iranian group remotely wiped nearly 200,000 devices. Stryker Medical Group manufactures implants, hospital beds, surgical instruments and more and maintains that none of their product was impacted. This is a healthy reminder that in the currently political climate, expect cyber attacks to increase.

In the discovery phase of a technology dispute, we're looking for THREE main things: 1. What is the opposition's information security policy? 2. Who is in charge? 3. Who performed the forensics? Want to know more about each of these three top priorities for us? Watch more and reach out to us today! sarah@legallycyber.com

When a cyber incident hits, vendor liability becomes front and center. This March, Sarah Anderson taught a live SproutEd CLE webcast on how to strategically litigate tech vendor disputes and position cases for resolution! Earn 1.5 General CLE credit and take the course today !

"Who suffers the loss when fraudulent ACH is at play?" According to courts from Florida and Arizona, the party in the best position to prevent the fraud (usually the PAYER) is most at fault. WATCH to learn more clues to prevent future ACH fraud!

The Crowdstrike Global Threat Report is important to us and our clients because it: Makes predictions that help SWA clients prepare for the future It tracks what we see in the trenches working as incident responders WATCH to hear two important takeaways Sarah Anderson is seeing in the 2026 report.

STOP promising "Guaranteed Response Times." It sounds like good customer service, but as an IT Director, putting these metrics in writing is a massive legal risk. Listen in as Sarah Anderson explains why! If you need help fixing your service agreements, reach out to Sarah and the Legally Cyber team today. We’ll make sure your contracts actually protect your hard work!

Why should Managed Service Providers (MSPs) not list clients on your website? 1. Tells potential attackers who your clients are and lets them evaluate your importance to attack you 2. Lets attorneys know who your clients are and, in the instance of a law suit, could add coparties 3. Let's clients know who to compare pricing with Need to dive deeper into why this is important? We'd love to! Comment, DM, or reach out to us today!

Uber Technologies' Uber One Subscription is getting a lot of heat right now. Why? The FTC's primary points of contention were: 1. Deceptive enrollment 2. Hard to cancel 3. Billed before free trial period Want to learn more? Comment, DM, or reach out to us today!

The new Texas Responsible AI Governance Act restricts many uses of AI. Two really stand out to us at SWA: 1. Prohibits any AI product that encourages someone to engage in any type of self-harm 2. Prohibits any use of AI to create sexual content As part of this new law, Texas is allowing the creation of a "Sandbox," which is a fake play area for developers to test apps that may violate this new law before they are distributed. Want to learn more about this new law and what it

If you manage a Facebook Meta Business page, you’ve likely received an "urgent" message saying your account is about to be suspended. This is the bait for the new "BitB" scam. They use that panic to get you to enter your password into a fake login window. It looks real, but it’s a trap to steal your credentials. Listen in as Sarah Anderson explains more and what you need to look out for!