Cybersecurity Dive October 1, 2025
Without legal protections, companies might stop reporting information about cybersecurity threats.
A federal program that encourages companies to share cyber threat information expired on Wednesday, raising fears of significantly diminished cybersecurity collaboration between the government and the private sector.
The 2015 Cybersecurity Information Sharing Act protected companies from antitrust liability, regulatory enforcement, private lawsuits and public-records disclosures associated with threat indicators they shared with government agencies or other companies. Those protections, which addressed longstanding concerns from corporate lawyers, led to a decade of robust information sharing between the federal government and the private sector, helping agencies such as the Cybersecurity and Infrastructure Security Agency (CISA) identify, track and respond to widespread cyberattack campaigns.
But the law — known as CISA...
Today's Sponsors
Today's Sponsor