INDUSTRIES & PRACTICES

threat relief

Cybersecurity

Select Section

In today's technology-driven landscape where mobile connectivity and networker operations are universal, businesses are encountering an ever-expanding spectrum of cybersecurity issues.

Overview

We live in an era of unprecedented cybersecurity challenges that every company must face. Bad actors continue to evolve, using sophisticated technology to attack critical networks, engage in economic espionage, and steal personal and other sensitive financial information. Now, more than ever, businesses must think strategically about the cyber threats they face, and they must take proactive steps to mitigate those risks.

Clients rely on Dorsey’s Cybersecurity Practice Group for cutting-edge cybersecurity guidance. Dorsey’s multi-disciplinary team is comprised of attorneys from across the globe and includes former Department of Justice (DOJ) cyberfraud prosecutors, attorneys with expertise in IT security systems, and attorneys versed in cybersecurity from the perspective of corporate and regulatory compliance, intellectual property, the healthcare industry, and FinTech. All of this is supplemented by Dorsey’s broad bench of data privacy and cyber insurance attorneys, who provide guidance across related industry sectors.

Focus Areas

Cybersecurity Preparedness + -

Regulatory Enforcement + -

Data Breaches + -

Confidential Information & Trade Secrets + -

Privacy & Social Media + -

Experience

Current team member, while serving in the DOJ, coordinated the District of Arizona’s Darknet and Cryptocurrency Task Force, which is an attorney-led coalition of federal agencies aimed at disrupting darknet activity and seizing illicitly obtained cryptocurrency.
Defended an individual corporate officer defendant in a derivative class action for breach of fiduciary duty stemming from a data breach.
Dorsey developed immediate response measures for a large agricultural cooperative whose sensitive payroll information of high-level executives had been compromised as well as emergency communication procedures. Within an hour of the incident we assessed the potential scope of disclosure, possible methods for retrieval to minimize potential dissemination of material, and assessed reporting obligations.
Our cybersecurity team assisted a health care provider with a data breach response involving unauthorized disclosure of PHI by an employee. Our team assessed potential notification requirements, retrieved data from various devices used by the former employee and her family, and developed creative alternatives to address emerging issues not covered by regulatory guidelines.
Members of Dorsey’s data protection team represented a health care organization in an Office of Civil Rights investigation of potential HIPAA violations following a data breach involving over 38,000 individuals.
Dorsey represented a human capital management company in a class action lawsuit arising from a third-party hacker. Plaintiffs alleged that because the hacker accessed their personal information, they faced an increased risk of identity theft and were forced to pay for credit monitoring and identify theft protection. A New Jersey trial court granted Dorsey’s motion to dismiss on the grounds that Plaintiffs lacked standing to sue absent alleged actual misuse of their personal information or actual identity theft. The Third Circuit affirmed.
A brokerage firm relied on Dorsey’s cybersecurity practitioners to handle a class action suit relating to a database containing certain confidential personal and financial information of approximately 250,000 of the client’s then current and former customers. The database was compromised by a computer hacker who illegally obtained access to the information through a sophisticated network intrusion. Plaintiffs alleged violations of the Fair Credit Reporting Act, breach of contract, violations of the Montana Consumer Protection Act, negligence and negligence per se. After our client filed its motion to dismiss, the parties entered into a class-wide settlement agreement, which was approved by the Court.
Analyzed potential privacy and data protection issues associated with risk management solutions for a company’s potential acquisition of a mobile app authentication service.
Dorsey was approached by a number of California wineries who had been notified by a common vendor that their customer information may have been hacked. We put together a team overnight to provide breach notifications to customers of over 30 wineries for 48 different jurisdictions and to dozens of state Attorneys General within 24 hours of being retained. While the Krebs blog had a head start on us, by the time it “broke the story,” customers had already been notified, and the media ignored the event.