You are here: / / THE FOIL REQUEST FOR THE EMAIL ADDRESSES OF ALL NEW YORK CITY EMPLOYEES...
,

THE FOIL REQUEST FOR THE EMAIL ADDRESSES OF ALL NEW YORK CITY EMPLOYEES PROPERLY DENIED UNDER THE CYBERSECURITY EXEMPTION (FIRST DEPT).

The First Department, affirming Supreme Court’s denial of petitioner’s FOIL request for the email addresses of all New York City employees, determined the information was covered by the cybersecurity exemption from disclosure under FOIL. The petitioner is a foundation which seeks to inform those city employees who are public-employee-union members of their right to opt out of union membership:

… DCAS’s [NYC Department of Citywide Administrative Services’] General Counsel “articulat[ed] a particularized and specific justification for denying access” … under the cybersecurity exemption by explaining that “disclosure would create a substantial risk to the information technology infrastructure of the City of New York, including computer hardware, software, and data.”

The City Cyber Command’s Deputy Chief Information Security Officer further explained that disclosing “all New York City employees’ email addresses would relinquish control of the City’s information technology assets and jeopardize the security of those assets and of City infrastructure” by “mak[ing] it substantially easier for threat actors to successfully attack City . . . employees” in “[p]hishing and other email-based attacks.” Phishing and other confidence-based attempts at fraud prey on a target’s trust. The other information sought herein concerning employee’s names, titles, and other employment-related information could be used in conjunction with an email address to dupe unsuspecting targets. Of course, we do not find that the Foundation has any intention of phishing or committing any other type of fraud; it seeks to advance its mission. We note these facts only to point out the risks that can ensue from mass release of public employee contact information should the information fall into the wrong hands.

For these reasons, DCAS “articulate[d] a legitimate concern covered by the exemption”— that disclosure of email addresses could “breach or compromise [the agency’s] information technology infrastructure” or enable attackers to “gain access to or manipulate information maintained by” DCAS … . Matter of Freedom Found. v New York City Dept. of Citywide Admin. Servs., 2024 NY Slip Op 04483, First Dept 9-19-24

Practice Point: Here the FOIL request for the email addresses of all NYC employees was properly denied under the cybersecurity exemption because of the possibility of “phishing and other email-based attacks.”​

 

You might also like
PLAINTIFFS ENTITLED TO SUMMARY JUDGMENT ON THEIR DEFECTIVE DESIGN CAUSE OF ACTION IN THIS PRODUCTS LIABILITY CASE (FIRST DEPT).
IN THIS DESIGN DEFECT PRODUCTS LIABILITY CASE, THE LOSS OF THE SPECIFIC PRODUCT WHICH CAUSED THE INJURY DID NOT PREVENT DEFENDANT-MANUFACTURER FROM PRESENTING A DEFENSE; THE COMPLAINT SHOULD NOT HAVE BEEN DISMISSED ON SPOLIATION GROUNDS (FIRST DEPT).
CHILD SUPPORT ARREARS PROPERLY AWARDED TO MOTHER, BUT THE AMOUNT SHOULD HAVE BEEN CALCULATED THROUGH THE HEARING DATE (FIRST DEPT).
PLAINTIFF WAS INJURED ATTEMPTING TO HOLD BACK A HAND TRUCK WITH A 500 POUND LOAD AS HE WAS DESCENDING STAIRS; IT WAS POSSIBLE TO LOWER THE LOAD USING RIGGING IN AN ELEVATOR SHAFTWAY BUT PLAINTIFF WAS DIRECTED TO USE THE STAIRS; PLAINTIFF WAS PROPERLY AWARDED SUMMARY JUDGMENT ON HIS LABOR LAW 240 (1) CAUSE OF ACTION (FIRST DEPT).
REJECTING THE 2ND DEPARTMENT’S CRITICISM OF THE 1ST DEPARTMENT’S THIRD-PARTY-ASSAULT JURISPRUDENCE, THE 1ST DEPARTMENT HELD THE BROKEN DOOR THROUGH WHICH THE ASSAILANTS GAINED ACCESS TO THE BUILDING WHERE PLAINTIFF’S DECEDENT WAS SHOT AND KILLED WAS NOT A PROXIMATE CAUSE OF THE SHOOTING BECAUSE THE ASSAILANTS WOULD HAVE FOUND A WAY TO ENTER THE BUILDING EVEN IF THE DOOR LOCK WERE WORKING (FIRST DEPT).
THE RAPE FIRST AND CRIMINAL SEXUAL ACT FIRST CONVICTIONS WERE VACATED AS INCLUSORY CONCURRENT COUNTS OF TWO PREDATORY SEXUAL ASSAULT COUNTS (FIRST DEPT).
THE DEFENDANT WHICH RENTED OUT THE AERIAL LIFT WHICH MALFUNCTIONED WAS NOT AN AGENT OF THE OWNER OR CONTRACTOR AND EXERCISED NO CONTROL OVER THE WORK, THEREFORE THE LABOR LAW CAUSES OF ACTION SHOULD HAVE BEEN DISMISSED; THE NEGLIGENCE CAUSE OF ACTION, HOWEVER, PROPERLY SURVIVED (FIRST DEPT).
RESPONDENT CANDIDATE FOR THE NYS ASSEMBLY DID NOT DEMONSTRATE HE MAINTAINED A RESIDENCE IN NEW YORK FOR FIVE YEARS; PETITIONERS’ APPLICATION TO INVALIDATE RESPONDENT’S CANDIDACY SHOULD HAVE BEEN GRANTED (FIRST DEPT).

Categories

Sign Up for the Mailing List to Be Notified When the Site Is Updated.

  • This field is for validation purposes and should be left unchanged.

Copyright © 2026 New York Appellate Digest, Inc.
Site by CurlyHost | Privacy Policy

EVEN WHERE, AS HERE, THE REVIEWING COURT WOULD HAVE DECIDED THE MATTER DIFFERENTLY,... THE GRAND JURY EVIDENCE SUPPORTED THE INDICTMENT COUNTS CHARGING DEFENDANT STATE...