Irish police will have the power to compel people to provide passwords for electronic devices when carrying out a search warrant under new legislation. From a report: The change is part of the Garda Siochana Bill published by Irish Justice Minister Heather Humphreys on Monday. Gardai will also be required to make a written record of a stop and search. This will enable data to be collected so the effectiveness and use of the powers can be assessed. Special measures will be introduced for suspects who are children and suspects who may have impaired capacity. The bill will bring in longer detention periods for the investigation of multiple offences being investigated together, for a maximum of up to 48 hours. It will also allow for a week's detention for suspects in human trafficking offences, which are currently subject to a maximum of 24 hours detention.

The U.S. Supreme Court on Monday gave Microsoft's LinkedIn another chance to try to stop rival hiQ Labs from harvesting personal data from the professional networking platform's public profiles -- a practice that LinkedIn contends threatens the privacy of its users. From a report: The justices threw out a lower court ruling that had barred LinkedIn from denying hiQ access to the information that LinkedIn members had made publicly available. At issue is whether companies can use a federal anti-hacking law called the Computer Fraud and Abuse Act, which prohibits accessing a computer without authorization, to block competitors from harvesting or "scraping" vast amounts of customer data from public-facing parts of a website. The justices sent the dispute back to the San Francisco-based 9th U.S. Circuit Court of Appeals to reconsider in light of their June 4 ruling that limited the type of conduct that can be criminally prosecuted under the same law. In that case, the justices found that a person cannot be guilty of violating that law if they misuse information on a computer that they have permission to access.

NBC reports that America's "Teamsters" labor union was hit by a ransomware attack demanding $2.5 million back in 2019.

"But unlike many of the companies hit by high-profile ransomware attacks in recent months, the union declined to pay, despite the FBI's advice to do so, three sources familiar with the previously unreported cyberattack told NBC News." Personal information for the millions of active and retired members was never compromised, according to a Teamsters spokesperson, who also said that only one of the union's two email systems was frozen along with other data. Teamsters officials alerted the FBI and asked for help in identifying the source of the attack. They were told that many similar hacks were happening and that the FBI would not be able to assist in pursuing the culprit.

The FBI advised the Teamsters to "just pay it," the first source said. "They said 'this is happening all over D.C. ... and we're not doing anything about it,'" a second source said.

Union officials in Washington were divided over whether to pay the ransom — going so far as to bargain the number down to $1.1 million, according to the sources — but eventually sided with their insurance company, which urged them not to pony up... The Teamsters decided to rebuild their systems, and 99 percent of their data has been restored from archival material — some of it from hard copies — according to the union's spokesperson.

The FBI's communications office did not reply to repeated requests for comment. The FBI's stance is to discourage ransomware payments.
NBC News draws a lesson from the fact that it took nearly two years for this story to emerge. "An unknown number of companies and organizations have been extorted without ever saying a word about it publicly."