Hyatt Hit by Cyberattack

US hotel giant Hyatt allegedly attacked as stolen data appears online

The US’s Hyatt empire may have succumbed to a cyberattack. A ransomware gang, code-named NightSpire, posted on the Dark Web, claiming it had attacked the international corporation.

In the post, which went public on January 19th, attackers claim to have exfiltrated 48.5GB of sensitive data originating from the Hyatt Place Chelsea New York hotel.

Posting a victim on the dark web is a common tactic ransomware gangs use to pressure companies into paying ransoms. Apart from data samples, NightSpire has also dropped a link stating: “Contact for free download of this data.”

This might indicate that the negotiations fell apart, leaving no agreement on the table. In such a scenario, attackers often sell or drop an entire stolen dataset online for anyone to download, causing victims reputational damage.

In-House Attorneys Brace for Surge in Cybersecurity, Employment Lawsuits

Legal departments are girding for intensified exposure to cybersecurity breaches and employment disputes this year, despite the volume of litigation overall holding relatively steady in 2025.

That's according to Norton Rose Fulbright's newly released 2026 Litigation Trends Survey. The report was based on surveys with more than 400 U.S. general counsel and in-house litigation leaders.

Thirty-eight percent of respondents said their organizations faced increased cybersecurity and data privacy exposure in 2025—making it the largest area of heightened risk in the report. Employment and labor disputes followed closely behind, at 31%.

The report forecasts that both categories will worsen in 2026, as shifting enforcement priorities, soaring verdict amounts and resource constraints collide.

Hackers Steal $4M in Crypto From Maryland Law Firm's Escrow Wallets

A law firm asked a Maryland federal court on Friday for emergency relief after hackers stole $4 million in cryptocurrency from its escrow wallets in a sophisticated phishing attack.

Greenberg & Liberman maintained client-owned cryptocurrency in segregated escrow wallets accessed through ledger hardware wallets and associated software applications, according to court filings.

And on Tuesday, unknown attackers, identified in the complaint as John Does, used a spoofed interface to trick authorized users into entering recovery credentials, allowing the hackers to access the firm’s systems and initiate unauthorized transfers.

Over a two-day period, the attackers moved $4 million in cryptocurrency out of the escrow wallets, rapidly splitting and routing the assets through intermediary addresses to obscure their origin, according to the complaint.

World Economic Forum: How Financial Services Lag on Cyber

The financial services sector is lagging behind in the use of AI to mitigate cyber security risks, according to the World Economic Forum’s Global Cybersecurity Outlook 2026.

Financial services companies are failing to become a leader in any of the five key use cases, WEF finds.

The results are based on extensive interviews with global business leaders, with the results revealed ahead of WEF’s Annual Meeting in Davos, where the world’s business, government and academic leaders are meeting.

Only just over half of financial services companies believe they have implemented any AI tools to automate their cyber security operations, behind the manufacturing, supply chain and transportation sector, and behind the energy sector.

How AI and Quantum, And Space Are Redefining Cybersecurity

We are currently undergoing a significant technological and industrial revolution. Artificial intelligence and quantum computing are no longer just ideas that are only talked about in research papers or labs. They are changing the way companies handle risk in real time, as well as cybersecurity, national security, and economic competitiveness.

These converging forces present challenges, as the development of cybersecurity, the impending impact of quantum decryption, and the cultural issues that businesses face as they adopt disruptive technology require new thinking and adaptation. The fact is that technological change is advancing faster than our institutions, policies, and workforce readiness.

Companies Weigh AI Cyber Risks in Disclosures to Atkins’ SEC

Publicly-traded companies crafting their approach for SEC filings—from Form 10-K annual reports to breach disclosures—face a new challenge: providing specific details about cyber threats tied to AI in real time as they work to understand emerging tools’ risks. They’re also on high alert for how the SEC will tackle cyber enforcement after the agency in November dropped a case against business software firm SolarWinds Corp. that cyber executives and attorneys broadly criticized as an overreach by the Biden administration.

“It wasn’t a complete retreat, but through that action and some of the other actions that the SEC has taken, it seems like they’re taking a step back from being ‘cyber auditor,’ but not taking a step back from being the enforcer of accurate disclosures around cybersecurity,” said Ilona Cohen, chief legal and policy officer at HackerOne, a security solutions provider.