“If this federal court case proceeds, and gains class-action status that the litigants are seeking, it could further alter already evolving compliance and liability concerns for banks and other U.S. financial institutions that get hacked — putting more responsibility on them to be proactive and thorough in their IT security efforts. The lawsuit might also delve deeper into the legalities and compliance issues when bad actors attack a financial institution through an outside vendor, as was the apparent case with the recent KeyBank hack.” J
Source: Lawsuit after KeyBank breach heralds potential changes in cyber liability | SC Media