The 4th Circuit Court has ruled that publishing data on the dark web alone may be damaging, potentially increasing extortion stakes and lawsuit exposure for breached companies.
An October decision by the 4th US Circuit Court of Appeals in Virginia has altered the risk calculus of data breaches, making it easier for litigants to successfully sue breached companies in certain situations.
The case involved an insurance company data breach, resulting in the leak of driver's license information for nearly 3 million customers.
Previously, most courts had ruled that having certain types of data stolen alone was not sufficient to prove damages, requiring plaintiffs to provide proof of actual damage or evidence of actual fraud.
the courts have mostly ruled
Author's summary: Court ruling may increase lawsuit exposure.