Skip to main content

Data Security Breaches

The global average cost of a data breach is $4.34 million—$9.44 million in the United States—and it can impact an organization for years after the incident. Arnold & Porter's Security Incident Rapid Response team can help address data breaches as quickly and efficiently as possible, fortify defenses and minimize short- and long-term losses. We have a full-service team that integrates our privacy, cybersecurity, white collar, healthcare, financial services, corporate, intellectual property, employment, and litigation professionals. Together, we develop appropriately tailored response plans designed to protect data breach victims from the very first instance of a breach through each stage of crisis management. These plans integrate substantive legal advice; detailed knowledge of the organization's objectives, business units and factual situations; and familiarity with the government's priorities, processes and approaches.

Experience Highlights

  • Adobe Systems in the successful resolution of data breach class action lawsuits against a leading digital marketing and media solutions company concerning the network intrusion and possible theft of customer information.
  • Barnes & Noble in obtaining the dismissal of data breach class action lawsuits involving the alleged theft of payment card information. 
  • Brooks Brothers in obtaining the dismissal of class action data breach claims involving the alleged theft of payment card information. 
  • Canon Business Processing Services in defending pending data breach class action litigation. 
  • Georgetown Hospital System in defending a pending data breach class action litigation relating to a ransomware attack. 
  • Horizon Blue Cross Blue Shield of New Jersey in defending pending data breach class action lawsuits brought under the Fair Credit Reporting Act and various state laws against a health insurance company involving the theft of laptops containing customer information. 
  • Leidos Inc. in obtaining the dismissal of class action data breach litigation concerning the theft of computer media containing health care information. 
  • Sabre Corporation in securing the dismissal of data breach claims concerning the unauthorized access to payment card information through a hotel reservation system. 
  • Tandem Diabetes Care in defending pending data breach class action litigation. Tandem Diabetes Care-Data Breach Litigation and Related Matters
  • University of Vermont Health Network in obtaining the dismissal of data breach class action litigation relating to unauthorized network access.