Smitha Gundavajhala

Lessons from the 23andMe Breach for Businesses of All Sizes

Breach, Data Privacy

Photo by National Cancer Institute on Unsplash On May 28, 2026, California’s Attorney General filed a lawsuit against Chrome Holding Co., formerly 23andMe, for failing to protect users’ sensitive data, including genetic data. In 2023, 23andMe experienced a major cybersecurity breach, exposing sensitive data and genetic information for 7 million customers across 14,000 accounts. Although […]


James Bush

AI Hallucinations Keep Costing Lawyers in Court

AI, Data Privacy

Key Takeaways: Oregon In December 2025, a federal judge in Oregon dismissed a vineyard inheritance lawsuit after finding that attorneys had relied on AI-generated research containing fabricated case law. The court dismissed the plaintiff’s claims, imposed $110,000 in sanctions and fees, and referred the matter to the Oregon State Bar. The court imposed monetary sanctions […]


Jailine Vasquez

When Intentional Conduct Defeats Coverage: Duty to Defend Lessons from Hartford v. Instagram

Data Privacy, Technology

The Delaware Superior Court’s decision in Hartford Casualty Insurance Co. v. Instagram, LLC reinforces a familiar principle: there is no duty to defend absent an “occurrence,” and there is no “occurrence” without an accident. Key Takeaways: The Underlying Litigation What makes the case notable is not a new rule of law, but how the court […]


James Bush

AI, Privilege, and Discovery: What Recent Cases Mean for Users

AI, Data Privacy

Two recent decisions from the Southern District of New York and the Delaware Court of Chancery highlight a growing legal reality: interactions with generative AI tools are not shielded by traditional legal protections. Courts are increasingly recognizing AI chat sessions as third-party communications that are fully discoverable in litigation and, in some cases, powerful evidence […]