E-commerce platform CafePress must pay $500,000 to small businesses and “bolster” its data security practices after it allegedly failed to “secure consumers’ sensitive personal data and covered up a major breach” in 2019, the FTC said Tuesday. The commission voted 4-0 to approve the agency’s complaint. It alleged CafePress, an online customized merchandise platform, “failed to implement reasonable security measures to protect sensitive information stored on its network, including plain text Social Security numbers, inadequately encrypted passwords, and answers to password reset questions.” The complaint was filed against former owner Residual Pumpkin Entity and PlanetArt, which bought the company in 2020. Future violations against the FTC’s order carry civil penalties of up to $46,517 each. The company didn’t comment.

States can’t bring antitrust claims against Facebook’s years-old acquisitions of WhatsApp and Instagram, Facebook argued Monday in a lawsuit from 48 state attorneys general (see 2201140061). The company cited a district court ruling that federal antitrust law’s four-year statute of limitations provides a “generous” guideline for laches in its filing against lead plaintiff New York before the U.S. Court of Appeals for the D.C. Circuit in docket 21-7078. The company argued Instagram and WhatsApp wouldn’t have achieved their growth without Facebook’s promotion and investment. “Subjecting Facebook to an equitable remedy now for these long-ago applications of the policies would be presumptively prejudicial,” it argued, seeking affirmation of the district court decision.

The tech industry’s lawsuit against a Texas social media law is scheduled for oral argument the week of May 9, the 5th U.S. Circuit Court of Appeals said Sunday in docket 21-51178 (see 2203030063).

Two weeks into Russia’s invasion of Ukraine, “we don't know how this evolves going forward, and it's really too early to tell what the overall impact of this on our business will be,” Twitter CEO Parag Agrawal told a Morgan Stanley investment conference Thursday. “In this moment that reminds us why public conversation is important in the world,” said Agrawal: “It gives us this opportunity to showcase the value of Twitter to all of these people, but it also has us feel this immense responsibility.” Twitter has been “doing work proactively to be prepared for this moment” for years, he said. In 2019, it banned all ads from “state-affiliated media organizations,” and two years ago it started “labeling and de-amplifying all state-affiliated media entities,” he said: “We've been very, very transparent about any attempt that we've seen from state actors to manipulate the conversation on Twitter.” Former Chief Technology Officer Agrawal took over as Twitter CEO in November after Jack Dorsey abruptly left the company (see 2111290038).

Texas’ social media law doesn’t violate the First Amendment, Florida and 10 other states said Wednesday in an amicus brief filed with the 5th U.S. Circuit Court of Appeals in docket 21-51178 (see 2203030063). When a social media platform creates a forum for billions of speakers, the First Amendment doesn’t prohibit laws that “regulate the manner in which the platform hosts those messages,” the states said. Regulation becomes problematic only when it “curtails” the host’s “own message.” Texas’ law doesn’t do that, they said: “It permits social media platforms to say whatever they like; they simply must not stifle the speech of others in darkness.” The First Amendment doesn’t prohibit such a neutral disclosure regime, they argued. NetChoice and the Computer and Communications Industry Association sued to block the law, claiming First Amendments violations. The associations are suing against a similar law in Florida (see 2111150066). Joining Florida in the filing in support of Texas are Alabama, Alaska, Arizona, Arkansas, Kentucky, Louisiana, Mississippi, Missouri, Montana and South Carolina.

The FTC and DOJ’s Antitrust Division will host an enforcers' summit April 4, the commission announced Thursday. FTC Chair Lina Khan, DOJ Antitrust Division Chief Jonathan Kanter and senior staff will discuss “modernizing merger guidelines and interagency collaboration,” the FTC said. The hybrid event will include in-person and virtual participation from international enforcers and state attorneys general. The agencies announced the joint merger guidelines review in January (see 2201180073).

Google signed a definitive agreement to buy cybersecurity platform Mandiant for $5.4 billion in an all-cash deal, said the buyer Tuesday. Mandiant will join Google Cloud when the transaction closes later this year, it said. “Organizations are facing cybersecurity challenges that have accelerated in frequency, severity and diversity, creating a global security imperative,” said Google. “The cloud represents a new way to change the security paradigm by helping organizations address and protect themselves against entire classes of cyber threats.”

It’s “no secret” that corporate awareness of cybersecurity is “high,” Palo Alto Networks CEO Nikesh Arora told a Morgan Stanley investment conference Monday. “I can’t imagine five years ago, you’d be asking the CEO, how secure is your infrastructure? And are you worried about the risk of cyberattacks?” Arora thinks there's "more of a focus on getting security right than there ever was,” he said. “We’re woefully ill-prepared for what could happen to the technology infrastructure in this country and around the world.” The cybersecurity “debate” has evolved from “whether I could be hacked,” to “if I did get hacked, how am I going to get back up again?” he said.

Authorities arrested a man who committed cryptocurrency securities fraud by misrepresenting the size and profitability of Ormeus Coin, DOJ announced Tuesday. John Albert Loar Barksdale, 40, falsely claimed that Ormeus “was secured by a $250 million cryptocurrency mining operation, which would have been one of the largest such operations in the world, and that its mining revenues exceeded $5 million on a monthly basis,” the department said. According to DOJ, he raised $70 million from more than 8,000 investors “through a web of lies, which he spread through in-person roadshows, social media, and even a jumbotron in Times Square.” He faces up to five years in prison for securities fraud and up to 20 years for additional charges of conspiracy and wire fraud. The company didn't comment.

Ohio’s content moderation bill “conflicts with the First Amendment,” the Computer & Communications Industry Association said Tuesday as the state’s House Civil Justice Committee considered legislation at a hearing. Introduced by Republican Reps. Scott Wiggam and Al Cutrona, HB-441 would allow social media users to sue platforms for viewpoint discrimination, similar to laws passed in Texas and Florida. It lists deplatforming and other restrictions to user interaction as potential forms of censorship. There was no discussion on the bill in its fifth hearing Tuesday. The committee “has been repeatedly cautioned that its content moderation bill conflicts with the First Amendment by forcing private companies to carry speech,” said CCIA State Policy Director Alyssa Doom in an emailed statement.