US Appeals Court lowers burden of proof for data breach lawsuits | CSO Online

The 4th US Circuit Court of Appeals has lowered the burden of proof for data breach lawsuits, ruling that publication of stolen data on the dark web alone may be sufficient to prove damages. This decision could increase lawsuit exposure for breached companies and alter the risk calculus for CISOs, potentially motivating attackers to extort higher ransoms.