Making Sure It’s Covered: Cyber Insurance — What are the Practical Things In-House and Outside Attorneys Need to Know? (conference panel discussion)

Cyber insurance is a hot topic among many but unfortunately, far too many companies are not getting any cyber coverage or are not getting the coverage they need for their risks. This week I had the privilege of moderating a panel discussion targeted for in-house counsel that was titled “Making Sure It’s Covered: Cyber Insurance …

Cyber Insurance – A Better Way to Help Small Businesses Manage Cyber Risk

In a recent Wall Street Journal article, The Case for Protecting Small Firms from Cyber Lawsuits, the authors argue that, because smaller companies lack the resources of larger companies when it comes to protecting data, smaller companies should have legal protections to exempt them from facing the consequences of these laws. While it seems this …

#DtSR Podcast: Guest Host on Newscast

I was a guest recently on the Down the Security Rabbithole Podcast to talk about cybersecurity law with hosts Rafal Los (@Wh1t3Rabbit) and Michael Santarcangelo (@Catalyst). As always, it was a blast! Listen to the Podcast   Join the #DtSR Discussion on Twitter For more great #DtSR content, check out the full Down the Security Rabbithole Podcast homepage and also check […]

#DtSR Podcast: Latest Issues in Law and Cybersecurity

I was a guest recently on the Down the Security Rabbithole Podcast to talk about cybersecurity law with hosts Rafal Los (@Wh1t3Rabbit) and Michael Santarcangelo (@Catalyst). As always, it was a blast! Listen to the Podcast   Join the #DtSR Discussion on Twitter For more great #DtSR content, check out the full Down the Security Rabbithole Podcast homepage and also check …

SecureWorld Post: 4 Key Cyber Insurance Takeaways for Companies from Spec’s v. Hanover Lawsuit

In my latest post for SecureWorld, explain 4 key takeaways for businesses from the Spec’s v. Hanover lawsuit regarding cyber insurance. Check it out and let me know what you think:  4 Key Cyber Insurance Takeaways for Companies from Spec’s v. Hanover Lawsuit  

Target Data Breach: What Has It Cost? What Has Insurance Covered?

Target, in a recent document filed with the Securities and Exchange Commission, provided updated information on the financial impact of its 2013 data breach: It now estimates paying $264 million in breach-related costs, ranging from litigation claims to the expenses it experienced for fixing systems and sending out information at the time of the attack …

Cyber Insurance: Social Engineering Not Covered Under “Computer Fraud” Insurance Provision

Losses stemming from social engineering scams like the business email compromise are not covered by “computer fraud” provisions of commercial crime insurance policies according to the Fifth Circuit Court of Appeals in Apache Corp. v. Great American Insurance Co.

Cybersecurity Legal Issues: What you really need to know (slides)

Shawn Tuma delivered the presentation Cybersecurity Legal Issues: What you really need to know at a Cybersecurity Summit sponsored by the Tarleton State University School of Criminology, Criminal Justice, and Strategic Studies’ Institute for Homeland Security, Cybercrime and International Criminal Justice. The presentation was on September 13, 2016 at the George Bush Institue. The following are the slides …

D CEO Magazine: Why Cybercriminals Are Targeting Law Firms

Many thanks to attorney and legal scholar extraordinaire John G. Browning (@therealjohnbrow) for quoting Shawn Tuma in his article in this month’s D CEO magazine: Why Cybercriminals Are Targeting Law Firms. Please read the full article to hear Tuma’s advice to John’s questions of why law firms often have poor(er) cybersecurity and what law firms can …

What Does the Travelers Case Really Mean for Cyber Insurance?

Watch the video for the explanation or see below for the spolier. https://www.youtube.com/watch?v=nMXIw4d9xMk   SPOLIER ALERT! In The Travelers Indemnity Company of America v. Portal Healthcare Solutions, L.L.C., No. 14-1994 (4th Cir. Apr. 11, 2016), the Fourth Circuit held that Travelers was required to cover Portal’s data breach under its Commercial General Liability (CGL) Policy’s Advertising …