Security Incident Response
- Represented a health care client involved in a ransomware attack, requiring both a complex forensic investigation and extensive data review and restoration processes.
- Represented a global company in connection with a network and cloud service provider attack by multiple state-sponsored actors targeting the infrastructure for both espionage and financial crime-based purposes. The response included extensive forensic investigation and data analytics efforts to identify and report on impacted information affecting both individuals and companies as well as working with national security and law enforcement arms of the U.S. government.
- Represented a global technology company in a targeted business email compromise scheme involving unauthorized wire transfers of multiple business partners over a several month period.
- Represented a health care client in an extensive cyber intrusion involving the collection of a large volume of data and provided advice on incident response, oversaw forensic investigators, and assisted with a large data review.
- Representing a large health care provider in a vendor website breach, including vandalism and attempted theft of databases with millions of PHI records compromised.
- Assisted one of the world’s largest payment processors with investigation and notification in a security incident involving a subsidiary’s e-commerce platform and payment card data. Our counsel included assistance with oversight of the forensic investigation, advising on issues related to investigation by the payment card brands, and individual and regulatory notifications in over 20 countries.
- Assisted a major financial services holding company in managing incident response, regulatory inquiries, and extensive cooperation efforts with the FBI for one of the top ten HIPAA breaches of 2018, resulting from social engineering and vishing attacks by foreign actors.
- Represented a large telecommunications company in investigating a sophisticated state-sponsored attack with national security implications, including facilitation of classified law enforcement interactions.
- Represented a large health care company in review and analysis of a ransomware incident involving an extensive and sophisticated intrusion.
- Represented a large international retail company with an incident involving cyber extortion of a subsidiary in connection with potential theft of personal data.
- Assisted a regional financial institution with hundreds of locations in analyzing breach notification and response obligations for skimming incidents.
- Assisted a community bank with investigation and response of incident involving placement of skimming device on ATMs.
- Represented several large global organizations in connection with government-led national security investigations resulting from state-sponsored attacks originating from different countries/threat actors.
- Represented a large, franchised restaurant business in connection with a cybersecurity incident investigation, including ongoing analysis of cybersecurity insurance issues, incident litigation, and regulatory defense.
- Represented one of the largest home improvement retailers in the U.S. in connection with a sophisticated cyberattack and criminal intrusion involving customized malware targeting payment card data from point-of-sale systems. The representation includes, among other areas, coordinating with the payment card brand networks and federal and state law enforcement agencies, directing the forensic investigation of the PFI and other third-party forensic firms, and defending multiple putative class actions filed by financial institutions.
- Represented a global diversified industrial company in connection with a targeted attack by sophisticated threat actors engaged in industrial espionage and financial fraud.
- Represented a global provider of business information in connection with a sophisticated intrusion by Eastern European organized criminal groups that impacted data breach laws and regulations in more than 50 countries. The incident response included directing a complex and technical forensic investigation involving U.S. and non-U.S. systems; analyzing U.S. state and federal and international breach notification statutes, regulations, and recommendations and coordinating the notification process; responding to numerous state attorneys general inquiries; development and execution of crisis communication plans; and participating in frequent senior executive and board-level meetings.
- Represented a global payment processor in connection with a technical, complex computer crime investigation involving a sophisticated cyber threat actor. The crisis response effort included advising on myriad legal issues, including securities law guidance, regulatory issues, class action defense, governmental investigations, and insurance coverage and issues. The effort also included supervising and managing a complex cyber forensic investigation that included a rapid response to a sophisticated intruder with deep and persistent access to the environment; development of containment, eradication, and remediation strategies; and coordination of the activities of multiple third parties, including an independent forensic investigator, several payment card brand networks, financial regulators, and federal law enforcement.
- Represented a global retail company in a sophisticated cyberattack involving customized malware targeting payment card data from point-of-sale systems. The crisis response included coordinating the activities of multiple third parties, including state and federal regulators, payment card brand networks, federal law enforcement agencies, and the Department of Justice, as well as directing multiple third-party forensic firms in conducting a technical, forensic investigation.
- Represented a global payments company in an extensive data theft incident by a former employee. The representation included directing a technical forensic investigation, overseeing a complex fraud data analytics analysis, preparing evidence for law enforcement and federal prosecution, and counseling on disclosure and customer communications strategies.
- Represented a global electronics company in connection with a sophisticated reshipping fraud scheme operated out of Eastern Europe impacting high-end electronics and involving multiple vendors.
- Represented one of the world’s largest interactive marketing services providers in a massive network breach, involving more than 60 million individual records.
- Worked with a global energy company suspected of being compromised by advanced persistent threat actors. The response included enhanced monitoring of critical systems; preventive forensics, including a breach indicator assessment, a review of existing an investigation, and law enforcement information; and assisting management with briefings to executives.