25 States Sue Trump Over New Section 301 Tariffs
Twenty-five states say the White House rushed forced-labor tariff probes from a year to four months, then slapped on double-digit duties.
Masthead · Regulatory Intelligence Writer
Raleigh, NC · Joined May 2026
10+ years in regulatory strategy across biotech and small-molecule pharma. Writes the FDA enforcement and DOJ angles that move sponsor calendars. Raleigh, NC.
Twenty-five states say the White House rushed forced-labor tariff probes from a year to four months, then slapped on double-digit duties.
Otsuka's kidney drug hit a normal decline rate FDA has never cleared before, and it just outperformed a rival that beat it to full approval.
Rohit Chopra swapped the CFPB for a California cabinet post built to police junk fees, hidden charges, and kickbacks across dozens of merged agencies.
OCC and FDIC just raised the CRA small-bank exemption to $1 billion and started capping grants to groups the agencies call 'activist.'
AstraZeneca and Ionis's Wainua missed its ATTR-CM endpoint, and the fallout is splitting winners from losers across three rival drug programs.
A federal judge let Reddit's DMCA claims against Perplexity and SerpApi survive, just days after tossing Google's nearly identical case.
DOJ's cartel line about Scoular's $10.2M FCPA deal appears once in a 52-page document, copy-pasted straight from the press release.
Capricor's CEO won't rule out suing FDA after a 9-3 adcomm loss she blames on an unsigned statistical draft the agency used as its benchmark.
CareCloud sat on the details for four months. The new filing shows SSNs, bank accounts and passports exposed together in a six-day AWS breach.
eBay's settlement with the Steiners breaks norms: no confidentiality clause, and a public statement naming its own executives' conduct.
A federal judge blocked Minnesota's felony ban on Kalshi and Polymarket, but hinted the state could still outlaw bets on Love Island USA.
FDA briefing docs call Replimune's survival data 'not interpretable,' with a third rejection looming two days before a make-or-break vote.
A $45.9M judgment, a lifetime ban, and a fine-print clause that could make Merdjanian pay every dollar of it, the third operator banned since 2025.
New York's DFS says Swedbank staged its 2018 document production to bury Baltic ties to Mossack Fonseca, after hiding those links in 2016.
A seven-chain drain of Triple-A's treasury wallets left the Singapore stablecoin firm $11.8 million lighter, and it stayed silent until Monday.
GitHub's Dependabot now waits three days before merging updates, a direct answer to the npm hijack that hit chalk and debug packages.
The OCC cleared Upstart's bank charter in under five months, days after denying Wise's — same administration, opposite outcomes, FDIC/Fed pending.
Sanofi kills its $1.4B Kymab drug in atopic dermatitis, the second autoimmune trial scrapped this summer as Dupixent's patent cliff looms.
A 270-155 House vote loosens merger review and capital rules for small banks, and 28 advocacy groups say it primes the next bailout.
Consumer advocates just told the Tenth Circuit where a loan is legally 'made' could decide every rent-a-bank fight still pending nationwide.
A Phase 3 flop erased Wainua's blockbuster case, leaving AstraZeneca's $80 billion 2030 goal riding on two coin-flip readouts this year.
A Colorado nonprofit tells the en banc Tenth Circuit that roughly 73% of voters already settled this rate-cap fight for out-of-state lenders in 2018.
Italy's DPA didn't buy WindTre's human-error defense: unguarded internal APIs, not the social engineering, drove the €1.7M penalty.
Kyverna licensed its CAR T from the NIH in 2022 before autoimmune data existed. The FDA just agreed a single-arm trial is enough to file.
Treasury's new GOLD EAGLE clearinghouse is voluntary on paper. Examiners have a way of turning voluntary data sources into checklist items.
Novartis turned a surrogate-endpoint approval into a full one, and it's already the third kidney drug in its IgAN lineup, cementing its market lead.
Guggenheim floats a $6 billion peak for Insmed's inhaled PAH drug, but Truist says the dosing data doesn't back the differentiator yet.
GSK just wrote off a chunk of its $2B Bellus buy, admitting camlipixant "is unlikely to transform patient care" after a split Phase 3 readout.
Custodia asks the Supreme Court to decide whether an unelected Fed bank president can veto a state-chartered bank's access to the payments system.
OFAC sanctioned a VPN service that priced ransomware access at $58 a pop, hitting hospitals and cities before Europol even named a suspect.
FDA cleared Celcuity's PI3K/mTOR inhibitor for breast cancer, sending shares up 7% and reviving buyout chatter for a one-drug biotech.
Roche just killed a 16-month Huntington's trial after hitting every biomarker target and missing on outcomes. Wall Street already picked its heir.
Twelve states are suing to block the $110B Paramount-WBD merger, just a month after DOJ's Antitrust Division cleared it without a fight.
NC taxed Kalshi at 6% versus 23% for sportsbooks in the same bill, a quiet bet on a circuit split a New York judge just ruled the other way on.
CISA's own postmortem admits it built its incident playbook mid-breach, after a contractor's GitHub slip exposed AWS GovCloud keys for months.
Brussels says Meta's autoplay and infinite scroll were never properly risk-assessed under the DSA, and Meta now has 90 days to file its formal defense.
A housing bill barely mentioning CBDC became law without Trump's signature, freezing the Fed out of digital dollars through 2030 anyway.
Interpol arrested 5,811 people and seized $293 million across 97 countries in Operation First Light, up from $257 million seized in 2024.
Judge Torres just ruled New York can enforce gambling law against Kalshi, deepening a circuit split that's likely headed for the Supreme Court.
NRC proposes deleting 'ALARA' from its radiation rules, but keeps the same LNT science that Trump's executive order branded irrational.
Two justices just called the FTC's core rulemaking power "startling," and CFPB's nearly identical authority may be next in the crosshairs.
DOJ filed a notice of appeal in the Rovirosa FCPA acquittal case, then admitted the Solicitor General hasn't decided if it wants one.
A House China Committee letter gives Eli Lilly until July 17 to explain trials run inside Chinese military hospitals and Xinjiang.
FBI and IRS-CI seize NetNut's domains over a 2-million-device botnet. Owner Alarum is a Nasdaq-listed company, not an anonymous darknet outfit.
Alibaba and Ant's AUS unit just bought their way out of a drug-trafficking case, $600M split between two penalty-forfeiture structures.
A Nevada federal judge slashed the FTC's $52.9M ask to $6.5M, but still found Cliq in contempt for years of dodging a 2015 anti-fraud order.
House Financial Services just voted to define wage-access fees as not-loans, pulling the rug from under every state AG's payday-lending case.
AstraZeneca just became Ken Paxton's latest pharma kickback target, paying nearly $34M for 'free nurses' without admitting wrongdoing.
A June 17 MOU put Iran sanctions on a wind-down clock. Banks still carrying BNP's nearly $1 billion OFAC settlement won't move yet.
Polymarket faces its first CFTC probe under Chairman Selig after fake-trade allegations, plus a $3.1M frontend hack in the same week.
FBI and CISA warn Russian intel groups have evolved Signal phishing to steal Backup Recovery Keys, exposing victims' full message history.
Capricor just got an FDA adcomm on deramiocel it didn't see coming, one year after Prasad pulled the last one off the Federal Register in real time.
North Carolina's HB 315 makes it the only U.S. state to ban litigation funding outright, setting $50K per-violation fines and triple damages.
With 29% of Illinois families using BNPL for groceries, SB 3561 mandates IDFPR registration and capacity-to-repay checks by Jan. 2028.
Carr's 2-1 vote puts the $2B E-Rate program on a path to sunset or deep cuts, and the congressional-intent argument could next reach Lifeline.
DraftKings hacker Snoopy ran a shop selling stolen accounts, pocketed $465K in crypto, and now owes $1.79M in forfeiture and restitution.
Judge Jackson's expedited CFPB remand pits a 556-employee restructuring plan against a $677M injunction compliance gap and new funding caps.
A new executive order moves the post-quantum crypto deadline for high-value federal systems from 2035 to 2030, five years faster than planned.
Jubair, 20, faces a US indictment over 120 intrusions and $115M in ransom, but the UK's six-week trial never made it past opening arguments.
Exelixis' zanzalintinib missed OS in the NLM subgroup, putting roughly half of a $1.3B peak-sales estimate at stake before the Dec. 3 FDA call.
With the CFPB retreating, NJ AG Davenport's $20K-per-violation junk-fee blueprint may hand every state AG a ready-made enforcement map.
Polymarket staged $900K in fake wins for banned US users using copycat sites and a hired creator network. Its second marketing scandal in three weeks.
Four state AGs are probing FIFA's World Cup tickets: seat bait-and-switch, sky-high variable pricing, and no consumer disclosure framework.
USTR just filed Section 301 against Germany's €16B drug cost-cut plan. The UK deal is the blueprint, and a Sept. 22 hearing is now on the calendar.
EU Commission's leaked banking draft proposes Basel III relief for smaller lenders and capital relief on mortgages, but falls short of banks' ask.
Zoll labeled its 731 ventilator hazard life-threatening, classified the likelihood as remote. FDA's April warning letter found 23 missing complaints.
FDA adcomm voted 9-0 for Moderna's mFluvisa after Prasad's RTF letter threatened a $1B revenue opportunity and the 2028 breakeven goal.
Google's August 3 deadline brings IP-based ad personalization into GDPR territory, and the ICO's May advice means advertisers carry the risk.
49 exploitation events, 13 sources across nine countries, and Fortinet's three FortiSandbox flaws still aren't on CISA's KEV catalog.
Vermont signed its 23rd-state privacy law, but the enforcement clause has a built-in PRA threat if the attorney general goes underfunded.
FortiBleed exposed credentials for 73,932 Fortinet firewalls across 194 countries, covering roughly half of all internet-accessible FortiGate devices.
A compliance rule named "Patroit" silently forwarded research emails to a Gmail account for months. The typos suggest manual upkeep.
The FBI, Google, and Black Lotus Labs dismantled a China-based phishing ring with 9,000 fake sites and $1.9B in estimated consumer losses.
For $88 a week, Outsider gave cybercriminals a full phishing kit. The FBI and Google just shut it down after $1.9 billion in losses.
A Conti loader-coder pleads guilty to wire fraud, nearly three years after arrest in Ireland, and faces 20 years in prison.
Kyushu Electric's grid subsidiary lost a drive holding 10.9M customer records to a suspected theft, with METI demanding a full report by July 8.
A former employee silently accessed 34 million accounts while Coupang grew. The $412M Korean fine that just landed is only the start of the bill.
AudiA6 laundered $380M for ransomware gangs across three years. A Poland arrest unraveled a network that 11 countries couldn't crack alone.
Denis Obrezko charged for buying Void Blizzard's attack infrastructure; the FBI confirmed 11 U.S. company breaches, likely a fraction of the total.
FTC's restraining order against National Amendment Assistance exposes how CARES Act branding still lures distressed homeowners into foreclosure.
Sanofi pulled the MOBILIZE phase 3 after an independent DMC found riliprubart unlikely to deliver, leaving $555M in projected CIDP sales at risk.
$38B Visa-Mastercard swipe fee deal gets preliminary court nod, but the NRF says the fee cut just rolls rates back to 2023 levels.
Lilly's retatrutide hits 30.3% weight loss at two years while Novo Nordisk's oral Wegovy crosses 3 million scripts and queues two H2 FDA decisions.
Meta caught NSO running phishing campaigns in violation of a court-ordered no-hack ban, and it's now asking a federal judge for contempt.
Roche put $1.65B behind petrelintide's amylin mechanism. New ZUPREME-1 data from ADA 2026 shows just how clean the GI profile actually is.
Roche and Zealand say 9% weight loss with placebo-like tolerability beats 20% if patients can't stay on the drug. Phase 3 starts H2 2026.
Retatrutide's 30.3% weight loss at 104 weeks rivals bariatric surgery, but seven arrhythmias in Transcend-T2D-1 complicate Lilly's NDA path.
Pfizer's berobenatide posted 15.9% weight loss at 32 weeks with no plateau, its first ADA showing since the $10B Metsera deal closed.
Silent Ransom Group sent imposters into dozens of law firm offices this year with USB drives. FBI and Mandiant filed concurrent warnings.
CFPB converts immigration status into a Reg Z income-continuity factor, forcing lenders to audit policies built under its reversed 2023 guidance.
After DentaQuest didn't pay ShinyHunters, 234 GB went public: 2.6M accounts with Medicaid IDs, government IDs, and dates of birth.
Nobitex processed 50% of Iran's crypto inflows and routed stablecoins to the Central Bank. OFAC put it on the SDN list with its chairman and CEO.
Medline's $6.3B IPO didn't shield it from two FDA warning letters, the second citing nine contamination events at its Illinois plant.
The 5th Circuit's May 28 stay put Texas SB 2420 back in force, but four-state ASAA compliance still hinges on a First Amendment ruling.
Four plaintiffs including AI bias-detection firm SolasAI sued CFPB in D.C. to block the April rule stripping disparate impact from ECOA.
IBI363's phase 1 data put 47% of IO-resistant NSCLC patients alive at 24 months, the first real test of Takeda's $11.4B Innovent bet.
EU's Cloud and AI Development Act mandates EU-built software in public tenders, a direct shot at Amazon, Google, and Microsoft's state contracts.
Illinois legislators delayed the IFPA swipe fee ban a second year in a row, but OCC preemption means the 2027 date may mean little for national banks.
OMB's proposed rule hands political appointees full grant veto power, bans DEI and gender research, and lets agencies cancel awards at will.
J&J's Proteus phase 3 shows Erleada cut metastasis risk 20% and nearly doubled time before additional therapy, from 3.5 to 6-plus years.
The CFTC filed first and Kalshi filed second, and Minnesota is now fighting two federal preemption suits before its Aug. 1 felony ban takes effect.
Incyte's phase 3 frontMIND data cuts DLBCL progression risk 25%, but seven drugs and a pending OS read leave the first-line market wide open.
Talapro-3's 52% rPFS reduction spans both BRCA and non-BRCA HRR alterations, the full-spectrum breadth J&J's Akeega couldn't earn from FDA.
Ivonescimab's HARMONi-6 OS data hits ASCO's plenary Sunday, with AbbVie, BioNTech, and Merck holding competing bets on who wins the PD-1/VEGF race.
FDA's second warning to Alchymars in eight years cites the same deteriorated equipment FDA cleared in 2023, plus an import alert on top.
A $10M multistate settlement covers $6.5M in victim restitution, but GreenSky won't admit liability, pinning the scheme on 'prior ownership'.
California's AG named a coding error in DNA Relatives, a five-month detection gap, and misleading public statements as the three pillars of the suit.
Glassworm spent two years poisoning 300+ GitHub repos until CrowdStrike and Google killed all four of its C2 channels simultaneously.
OMB scrapped Biden's M-21-31 logging mandate before CISA's replacement is ready, giving agencies six months with no enforceable standard.
ShinyHunters dumped 185,300 people's data after 7-Eleven refused ransom: names, dates of birth, and addresses from a Salesforce breach.
The Fed's new payment account category hands FinTechs direct settlement access while stripping interest, discount window, and intraday credit.
C.A. Cloud's CEO and CSO pleaded guilty to concealing a five-year fraud scheme that funneled calls to scammers targeting elderly victims worldwide.
Cox Media Group's "Active Listening" AI never used voice data; the FTC's $880K settlement shows it was email lists at markup. Small businesses paid.
CHMP backed camizestrant for ER+/HER2- breast cancer as ODAC voted 3-6 against. Europe and the US disagree on trial design, not the drug's efficacy.
Gilead's Hepcludex wins US approval four years after a manufacturing CRL, becoming the first treatment for HDV in a market of up to 80,000 patients.
Trump's May 19 EO gives the Fed 120 days to weigh fintech access to payment rails. The master account question finally has a clock.
Ukrainian cyberpolice identified the Odesa teen on May 12: he ran the infrastructure behind $721K in unauthorized purchases from 28,000 accounts.
BE BOLD's Phase 3 data put a 10-point ACR50 gap between Bimzelx and Skyrizi, the $17.56B drug AbbVie built its post-Humira franchise on.
SEC closed its FCPA probe of Methode Electronics with no enforcement action, after two subpoenas covering executive pay and hotline tips.
Makary's exit triggered a cascade: four more FDA leaders gone in a week, and biotech wants Richard Pazdur next. The White House hasn't said yes.