Hunton Andrews Kurth LLP is uniquely qualified to represent clients in the assessment, investigation and litigation of matters arising from cybersecurity and data breach incidents. The firm has assisted clients with more than 2,000 data breaches and cybersecurity events worldwide and has defended our clients in some of the largest, most high-profile litigations. We assist our clients with every aspect of an information security event, including (i) directing incident investigations; (ii) retaining and overseeing cybersecurity consultants; (iii) mitigating financial loss and loss of confidential information; (iv) coordinating notification to affected individuals; (v) setting up call centers and training call center personnel; (vi) preparing for litigation, including advising on retention obligations; (vii) engaging with law enforcement officials and other government (federal, state and overseas) regulators; and (viii) defending resulting enforcement actions and litigation.

We regularly serve as liaisons to the FBI, US Secret Service, US Department of Justice, Federal Trade Commission and state attorneys general on behalf of our clients in these matters. We also routinely engage on our clients’ behalf with foreign data protection authorities in their investigations and enforcement actions. Our lawyers have represented clients throughout the US in federal and state courts, and globally before regulatory agencies and in alternative dispute resolution proceedings. These matters arise out of data security events asserted by regulators, consumers, our clients’ business partners and other parties. Our experience assisting clients with highly complex, large-scale cybersecurity events is internationally acclaimed.

Our lawyers work as part of a multidisciplinary team that is frequently involved immediately after a cybersecurity incident to help clients evaluate and manage all aspects of the event, often with our lawyers leading the investigation, coordinating the global legal analysis and notification to affected individuals and regulators, and generally coordinating the panoply of incident response activities. Information security matters implicate multiple risks and response issues. Because of that complexity, we represent our clients with an interdisciplinary and coordinated team that includes our internationally recognized Privacy and Cybersecurity practice.

Representative experience includes the following:

• We are representing Yahoo! in all aspects of its nation-state and criminal cybersecurity attacks that compromised approximately 3 billion user accounts. We are defending the company in over 40 consumer class actions across several districts. The federal suits have been consolidated by the Multi-District Litigation Panel in California while the state cases are proceeding before a California judge. We are handling all consumer class action lawsuits and are defending Yahoo! and its affiliate. The firm directed the forensic investigation, and is providing regulatory and litigation counsel and preparing litigation coordination strategies for Yahoo!
• We are defending a putative nationwide class action litigation regarding the alleged exposure of current and former employees’ personal information due to a spear-phishing attack.
• We are representing a global networking equipment manufacturer in an ongoing non-public investigation into data security practices related to networked devices.
• We are advising a large global manufacturer of mobile devices on its response to an extensive FTC inquiry issued to the company and seven other mobile device companies regarding their security updates process.