Careers

Talent Engagement

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Practices & Industries

Pro Bono

Home | BakerHostetler

NLRB Readopts 2020 Joint Employer Rule, Sunsets Biden Rule

Test new insight

S&G Article #2

Securities and governance litigation insights

Organizations face two primary cybersecurity risks – theft of data and operational disruptions. These dynamic risks can become reality because of an issue at the organization, a vendor or both. The need to implement and maintain “reasonable security” is understood, yet most organizations struggle to do so and find themselves unprepared to tell a persuasive cybersecurity story to defend their practices in the wake of an incident. Failing to leverage data and technology to meet organizational goals; the revenue and reputational impact of downtime; and the disruption, regulatory investigations and lawsuits that follow the disclosure of a security incident are material risks. Effective management of these risks requires an enterprise-wide approach. We supply the guidance to help organizations prioritize, develop and implement risk-based solutions to address these dynamic risks.

core/paragraph

<p>Organizations face two primary cybersecurity risks – theft of data and operational disruptions. These dynamic risks can become reality because of an issue at the organization, a vendor or both. The need to implement and maintain “reasonable security” is understood, yet most organizations struggle to do so and find themselves unprepared to tell a persuasive cybersecurity story to defend their practices in the wake of an incident. Failing to leverage data and technology to meet organizational goals; the revenue and reputational impact of downtime; and the disruption, regulatory investigations and lawsuits that follow the disclosure of a security incident are material risks. Effective management of these risks requires an enterprise-wide approach. We supply the guidance to help organizations prioritize, develop and implement risk-based solutions to address these dynamic risks.</p>

medium

thumbnail

core/image

Introduce new sections and organize content to help visitors (and search engines) understand the structure of your content.

core/heading

Heading

heading

Heading that resizes to fit its container.

stretchy-heading

Stretchy Heading


<h5 class="wp-block-heading" id="h-incident-response">Incident Response</h5>


Our incident response experience is unmatched; each year we help companies respond to more than 1,000 potential incidents. This experience enables us to triage the underlying issue, provide recommendations for a preliminary response and project what the organization is going to face in the coming days, weeks and months so informed decisions can be made. Because we work with forensic firms, ransom payment firms, crisis communications firms, mailing and call center vendors, brokers, and insurance carriers, we are able to streamline the engagement and deploy resources to manage the critical path of the response to an incident. An effective incident response involves more than knowing what the law requires ‒ getting key stakeholder relationship issues right is equally important. We quarterback the efforts to develop and continuously fine-tune strategic plans to identify, contain, assess, communicate about and remediate the issue. For organizations with which we have not yet worked, we operate a 24/7 incident response hotline that sends our team into action immediately in the event an incident is suspected (+1.855.217.5204)

Start with the basic building block of all narrative.

In a village of La Mancha, the name of which I have no desire to call to mind, there lived not long since one of those gentlemen that keep a lance in the lance-rack, an old buckler, a lean hack, and a greyhound for coursing.

Paragraph

paragraph

Paragraph that resizes to fit its container.

stretchy-paragraph

Stretchy Paragraph

<p>Our incident response experience is unmatched; each year we help companies respond to more than 1,000 potential incidents. This experience enables us to triage the underlying issue, provide recommendations for a preliminary response and project what the organization is going to face in the coming days, weeks and months so informed decisions can be made. Because we work with forensic firms, ransom payment firms, crisis communications firms, mailing and call center vendors, brokers, and insurance carriers, we are able to streamline the engagement and deploy resources to manage the critical path of the response to an incident. An effective incident response involves more than knowing what the law requires ‒ getting key stakeholder relationship issues right is equally important. We quarterback the efforts to develop and continuously fine-tune strategic plans to identify, contain, assess, communicate about and remediate the issue. For organizations with which we have not yet worked, we operate a 24/7 incident response hotline that sends our team into action immediately in the event an incident is suspected (+1.855.217.5204)</p>


<h5 class="wp-block-heading" id="h-incident-response-preparedness">Incident Response Preparedness</h5>


We help companies establish and revise incident response plans, conduct tabletop exercises featuring realistic data breach simulations, and partner with forensic and crisis communications firms to provide focused training to incident response teams.

<p>We help companies establish and revise incident response plans, conduct tabletop exercises featuring realistic data breach simulations, and partner with forensic and crisis communications firms to provide focused training to incident response teams.</p>

The annual BakerHostetler Data Security Incident Response Report is regarded as one of the industry’s most credible analyses of data security incidents faced by companies. The report helps companies understand potential threats, protect their data and fine-tune their incident response plans.

<p>The annual BakerHostetler Data Security Incident Response Report is regarded as one of the industry’s most credible analyses of data security incidents faced by companies. The report helps companies understand potential threats, protect their data and fine-tune their incident response plans.</p>


<h5 class="wp-block-heading" id="h-digital-risk-advisory">Digital Risk Advisory</h5>


We lead entities through investigations by state attorneys general, multistate attorneys general groups, the Federal Trade Commission, EU supervisory authorities and other international data protection regulatory authorities. When lawsuits are filed after a security incident is disclosed, we are the liaison for our clients to our litigation team to ensure that the facts that were identified and the strategy developed during the incident response phase are leveraged to support the execution of an effective defense strategy.

<p>We lead entities through investigations by state attorneys general, multistate attorneys general groups, the Federal Trade Commission, EU supervisory authorities and other international data protection regulatory authorities. When lawsuits are filed after a security incident is disclosed, we are the liaison for our clients to our litigation team to ensure that the facts that were identified and the strategy developed during the incident response phase are leveraged to support the execution of an effective defense strategy.</p>


<h5 class="wp-block-heading" id="h-cybersecurity-advisory">Cybersecurity Advisory</h5>


We help organizations develop risk-based and prioritized strategies to use data, leverage technology and become “compromise ready” by combining our technical capabilities, lessons learned from observing the causes of thousands of incidents and practical experience from time spent on-site with organizations. We help organizations improve the people, processes and technology they use by doing the following:

<p>We help organizations develop risk-based and prioritized strategies to use data, leverage technology and become “compromise ready” by combining our technical capabilities, lessons learned from observing the causes of thousands of incidents and practical experience from time spent on-site with organizations. We help organizations improve the people, processes and technology they use by doing the following:</p>

An organized collection of items displayed in a specific order.

core/list

List


<ul class="wp-block-list">
<li>Identifying, developing, prioritizing and implementing risk-based security enhancements, which may include leveraging analysis from external security firms (e.g., red team exercises, security assessments, penetration tests).</li>



<li>Conducting “reasonable security” assessments with the complex litigation and regulatory landscape in mind to help defend against regulatory inquiries or private actions alleging unreasonable security.</li>



<li>Addressing third-party exploitation and misuse of technology, such as online account credential stuffing and account takeovers.</li>



<li>Conducting due diligence in corporate transactions, including evaluating the target’s privacy and security risk posture, negotiating appropriate representations and warranties, and conducting pre-acquisition compromise assessments. After closing, we work with the acquiring entity to develop an appropriate plan to integrate the target.</li>



<li>Developing vendor management and technology contract programs, as well as negotiating significant agreements, such as those involving cloud-based services and new payment card security technology.</li>



<li>Developing cybersecurity enterprise risk management programs by working with entities, executive management teams, audit committees and boards of directors. These programs include implementing components of reasonable security, building a cybersecurity road map and conducting cybersecurity maturity assessments.</li>
</ul>


Identifying, developing, prioritizing and implementing risk-based security enhancements, which may include leveraging analysis from external security firms (e.g., red team exercises, security assessments, penetration tests).

core/list-item

List Item

<li>Identifying, developing, prioritizing and implementing risk-based security enhancements, which may include leveraging analysis from external security firms (e.g., red team exercises, security assessments, penetration tests).</li>

Conducting “reasonable security” assessments with the complex litigation and regulatory landscape in mind to help defend against regulatory inquiries or private actions alleging unreasonable security.

<li>Conducting “reasonable security” assessments with the complex litigation and regulatory landscape in mind to help defend against regulatory inquiries or private actions alleging unreasonable security.</li>

Addressing third-party exploitation and misuse of technology, such as online account credential stuffing and account takeovers.

<li>Addressing third-party exploitation and misuse of technology, such as online account credential stuffing and account takeovers.</li>

Conducting due diligence in corporate transactions, including evaluating the target’s privacy and security risk posture, negotiating appropriate representations and warranties, and conducting pre-acquisition compromise assessments. After closing, we work with the acquiring entity to develop an appropriate plan to integrate the target.

<li>Conducting due diligence in corporate transactions, including evaluating the target’s privacy and security risk posture, negotiating appropriate representations and warranties, and conducting pre-acquisition compromise assessments. After closing, we work with the acquiring entity to develop an appropriate plan to integrate the target.</li>

Developing vendor management and technology contract programs, as well as negotiating significant agreements, such as those involving cloud-based services and new payment card security technology.

<li>Developing vendor management and technology contract programs, as well as negotiating significant agreements, such as those involving cloud-based services and new payment card security technology.</li>

Developing cybersecurity enterprise risk management programs by working with entities, executive management teams, audit committees and boards of directors. These programs include implementing components of reasonable security, building a cybersecurity road map and conducting cybersecurity maturity assessments.

<li>Developing cybersecurity enterprise risk management programs by working with entities, executive management teams, audit committees and boards of directors. These programs include implementing components of reasonable security, building a cybersecurity road map and conducting cybersecurity maturity assessments.</li>

<ul class="wp-block-list"><li>Identifying, developing, prioritizing and implementing risk-based security enhancements, which may include leveraging analysis from external security firms (e.g., red team exercises, security assessments, penetration tests).</li><li>Conducting “reasonable security” assessments with the complex litigation and regulatory landscape in mind to help defend against regulatory inquiries or private actions alleging unreasonable security.</li><li>Addressing third-party exploitation and misuse of technology, such as online account credential stuffing and account takeovers.</li><li>Conducting due diligence in corporate transactions, including evaluating the target’s privacy and security risk posture, negotiating appropriate representations and warranties, and conducting pre-acquisition compromise assessments. After closing, we work with the acquiring entity to develop an appropriate plan to integrate the target.</li><li>Developing vendor management and technology contract programs, as well as negotiating significant agreements, such as those involving cloud-based services and new payment card security technology.</li><li>Developing cybersecurity enterprise risk management programs by working with entities, executive management teams, audit committees and boards of directors. These programs include implementing components of reasonable security, building a cybersecurity road map and conducting cybersecurity maturity assessments.</li></ul>


<h5 class="wp-block-heading" id="h-industries">Industries</h5>



<ul class="wp-block-list">
<li>Hospitality</li>



<li>Restaurants</li>



<li>Retail</li>



<li>Education</li>



<li>Insurance</li>



<li>Technology</li>



<li>Financial services</li>



<li>Community banks</li>



<li>Credit unions</li>



<li>Professional services</li>



<li>Energy and utilities<br>&nbsp;</li>
</ul>


<ul class="wp-block-list"><li>Hospitality</li><li>Restaurants</li><li>Retail</li><li>Education</li><li>Insurance</li><li>Technology</li><li>Financial services</li><li>Community banks</li><li>Credit unions</li><li>Professional services</li><li>Energy and utilities<br>&nbsp;</li></ul>

contentpilot/expand-more

<section class="wp-block-contentpilot-expand-more"><div class="wp-block-contentpilot-expand-more__excerpt is-visible" data-selector="expand-more"><p></p></div><div class="wp-block-contentpilot-expand-more__full-content" data-selector="expand-more"><h5 class="wp-block-heading" id="h-incident-response">Incident Response</h5><p>Our incident response experience is unmatched; each year we help companies respond to more than 1,000 potential incidents. This experience enables us to triage the underlying issue, provide recommendations for a preliminary response and project what the organization is going to face in the coming days, weeks and months so informed decisions can be made. Because we work with forensic firms, ransom payment firms, crisis communications firms, mailing and call center vendors, brokers, and insurance carriers, we are able to streamline the engagement and deploy resources to manage the critical path of the response to an incident. An effective incident response involves more than knowing what the law requires ‒ getting key stakeholder relationship issues right is equally important. We quarterback the efforts to develop and continuously fine-tune strategic plans to identify, contain, assess, communicate about and remediate the issue. For organizations with which we have not yet worked, we operate a 24/7 incident response hotline that sends our team into action immediately in the event an incident is suspected (+1.855.217.5204)</p><h5 class="wp-block-heading" id="h-incident-response-preparedness">Incident Response Preparedness</h5><p>We help companies establish and revise incident response plans, conduct tabletop exercises featuring realistic data breach simulations, and partner with forensic and crisis communications firms to provide focused training to incident response teams.</p><p>The annual BakerHostetler Data Security Incident Response Report is regarded as one of the industry’s most credible analyses of data security incidents faced by companies. The report helps companies understand potential threats, protect their data and fine-tune their incident response plans.</p><h5 class="wp-block-heading" id="h-digital-risk-advisory">Digital Risk Advisory</h5><p>We lead entities through investigations by state attorneys general, multistate attorneys general groups, the Federal Trade Commission, EU supervisory authorities and other international data protection regulatory authorities. When lawsuits are filed after a security incident is disclosed, we are the liaison for our clients to our litigation team to ensure that the facts that were identified and the strategy developed during the incident response phase are leveraged to support the execution of an effective defense strategy.</p><h5 class="wp-block-heading" id="h-cybersecurity-advisory">Cybersecurity Advisory</h5><p>We help organizations develop risk-based and prioritized strategies to use data, leverage technology and become “compromise ready” by combining our technical capabilities, lessons learned from observing the causes of thousands of incidents and practical experience from time spent on-site with organizations. We help organizations improve the people, processes and technology they use by doing the following:</p><ul class="wp-block-list"><li>Identifying, developing, prioritizing and implementing risk-based security enhancements, which may include leveraging analysis from external security firms (e.g., red team exercises, security assessments, penetration tests).</li><li>Conducting “reasonable security” assessments with the complex litigation and regulatory landscape in mind to help defend against regulatory inquiries or private actions alleging unreasonable security.</li><li>Addressing third-party exploitation and misuse of technology, such as online account credential stuffing and account takeovers.</li><li>Conducting due diligence in corporate transactions, including evaluating the target’s privacy and security risk posture, negotiating appropriate representations and warranties, and conducting pre-acquisition compromise assessments. After closing, we work with the acquiring entity to develop an appropriate plan to integrate the target.</li><li>Developing vendor management and technology contract programs, as well as negotiating significant agreements, such as those involving cloud-based services and new payment card security technology.</li><li>Developing cybersecurity enterprise risk management programs by working with entities, executive management teams, audit committees and boards of directors. These programs include implementing components of reasonable security, building a cybersecurity road map and conducting cybersecurity maturity assessments.</li></ul><h5 class="wp-block-heading" id="h-industries">Industries</h5><ul class="wp-block-list"><li>Hospitality</li><li>Restaurants</li><li>Retail</li><li>Education</li><li>Insurance</li><li>Technology</li><li>Financial services</li><li>Community banks</li><li>Credit unions</li><li>Professional services</li><li>Energy and utilities<br>&nbsp;</li></ul><p></p></div><button class="wp-block-contentpilot-expand-more__more-button is-visible" data-selector="expand-more">View More</button><button class="wp-block-contentpilot-expand-more__less-button" data-selector="expand-more">View Less</button></section>

<ul>
<li>BTI Litigation Outlook 2025 has recognized BakerHostetler as a Cybersecurity Litigation Powerhouse for four years in a row.</li>
<li>BTI Cybersecurity Powerhouse and BTI CyberSavvy Law Firm (2020)</li>
<li>Chambers Global
<ul>
<li>Privacy & Data Security: The Elite (USA) (2022 to 2024)</li>
<li>Privacy & Data Security (USA) (2014 to 2021)</li>
<li>Privacy & Data Security: Healthcare (USA) (2018 to 2024)</li>
<li>Privacy & Data Security: Litigation (USA) (2024)</li>
</ul>
</li>
<li>Chambers Fintech
<ul>
<li>Legal – USA (2018 to 2025)</li>
<li>Legal – Blockchain & Cryptocurrencies (2023 to 2025)</li>
<li>2024 and 2025 Band #1 ranking in Legal – Data Protection & Cyber Security (2023 to 2025)</li>
</ul>
</li>
<li>Chambers USA
<ul>
<li>Advertising: NAD Proceedings – Nationwide (2022, 2023)</li>
<li>Advertising: Transactional & Regulatory – Nationwide (2018 to 2023)</li>
<li>Privacy & Data Security: The Elite – Nationwide (2021-2023)</li>
<li>Privacy & Data Security: Litigation – Nationwide (2023)</li>
<li>Privacy & Data Security – Nationwide (2013 to 2020)</li>
<li>Privacy & Data Security: Healthcare – Nationwide (2018 to 2023)</li>
</ul>
</li>
<li>Chambers USA Award: “Privacy & Data Security Team of the Year” finalist (2015, 2017)</li>
<li>The Legal 500 United States
<ul>
<li>Media, Technology and Telecoms: Advertising and Marketing: Transactional and Regulatory (2018 to 2023)</li>
<li>Media, Technology and Telecoms: Cyber law (including data privacy and data protection) (2021-2023)</li>
<li>Media, Technology and Telecoms: Cyber Law (2016 to 2020)</li>
<li>Media, Technology and Telecoms: Data Privacy and Data Protection (2016 to 2020)</li>
</ul>
</li>
<li>Law360: Privacy “Practice Group of the Year” (2013 to 2015, 2018)</li>
<li>Selected for Vault’s Guide to Legal Practice Areas
<ul>
<li>Privacy and Data Security (2017 to 2021)</li>
</ul>
</li>
<li><em>U.S. News – Best Lawyers </em>“Best Law Firms” – National Rankings
<ul>
<li>Advertising Law (2018 to 2025)</li>
<li>Information Technology Law (2013 to 2025)</li>
<li>Technology Law (2012 to 2025)</li>
</ul>
</li>
<li>Selected as a 2020-2021 “Pacesetter” in Cybersecurity Services by ALM Intelligence Pacesetter Research</li>
</ul>


Eric A. Packel

Gerald J. Ferguson

Craig A. Hoffman

Lynn Sessions

Theodore J. Kobus III

Marcus McCutcheon

Elise R. Elam

Jonathan A. Forman

Patrick H. Haggerty

James A. Sherer

Nichole L. Sterling

May Tal Gongolevsky

Brittany  A. Yantis

Sara M. Goldstein

Andreas T. Kaltsounis

Aleksandra Vold

Kiley C. Keefe

Kimberly C. Gordy

Digital Risk Advisory and Cybersecurity

Experience

Recognitions

Insights and News

Featured Insights

Experience

Related Services

Recognitions

Insights and News

Featured Insights